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Cu ' Abstract. We discuss quantum information theoretical concepts on von Neumann algebras and 

^ , , lift the smooth entropy formalism to the most general quantum setting. For the smooth min- and 

max-entropies we recover similar characterizing properties and information-theoretic operational in- 
terpretations as in the finite-dimensional case. We generalize the entropic uncertainty relation with 
quantum side information of Tomamichel and Renner and sketch possible applications to continuous 

^ ' variable quantum cryptography. In particular, we prove the possibility to perform privacy amplifi- 

("V^ , cation and classical data compression with quantum side information modeled by a von Neumann 

>P ■ algebra. From this we generalize the formula of Renes and Renner characterizing the optimal length 

\l ' of a distillable secure finite-key. We also elaborate on the question when the formalism of von Neu- 

mann algebras is of advantage in the description of quantum systems with an infinite number of 
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1. Introduction 

During the last decades many concepts and techniques have been developed to study quantum 
information-theoretical tasks using physical systems described by finite-dimensional Hilbert spaces. 
One of today's main conceptual building blocks is the smooth entropy formalism. In this paper, 
we begin to extend its scope to more general physical systems modeled by von Neumann algebras. 
The general aim is the development of a mathematical framework suited to describe quantum infor- 
mational tasks with resources like bosonic or fermionic quantum fields. The motivation being the 
perspective to apply existing techniques to continuous variable protocols, where the focus lies on 
quantum cryptography. 

A fundamental concept in classical and quantum information theory are entropy measures. They 
can be defined via an axiomatic approach |78) . or operationally, in the sense that they quantitatively 
characterize fundamental tasks in information theory |841 [6l |83]. If the underlying resources are 
independent and identically distributed (iid), the relevant measure is the von Neumann entropyy In 
the setting of von Neumann algebras, it was defined by Araki |3j and studied by Petz and coworkers 
|45| [65l [66| 146) . In order to analyze resources of general form, Renner et. al. developed the smooth 
entropy formalism \12\ [75| [5^ [89l [90l 132} [73] . The fundamental entropic quantities are the smooth 
conditional min- and max-entropy, quantifying the necessary resources for basic information theo- 
retic tasks (cf. Section 12.21 for an overview). For iid resources the von Neumann entropy is then 
recovered in the asymptotic limit of infinitely many repetitions |89| . Furthermore, the smooth en- 
tropy formalism has also been applied to (quantum) statistical mechanics |30[ [33] . 

In order to study information theoretic tasks for systems modeled by von Neumann algebras, we 
first recapitulate the notion of multipartite systems and discuss quantum information theoretic tools. 



^The classical Shannon entropy of probability distributions can be seen as a special case of the von Neumann 
entropy. 
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like purification, in this mathematical formalism (Section [3]). This enables us to define and study the 
smooth conditional min- and max-entropy, H^-^^ (^1-^) ^^^d H^^^j, {A\B), in the setting of von Neu- 
mann algebras (Section d]). To be precise, we allow for an arbitrary von Neumann algebra to model 
the quantum side information B, while the system A is modeled by a finite-dimensional classical 
or quantum system. This is no restriction for questions regarding standard quantum cryptography, 
since there, the first system always becomes classical at some point. 

But why is the setting of von Neumann algebras physically interesting? In quantum information 
theory one usually considers quantum systems which can be described by finite-dimensional Hilbert 
spaces, like for instance the polarization of a photon. But in many experimental setups one operates 
with physical systems which are modeled on infinite-dimensional Hilbert spaces. One important 
example are continuous variable systems in quantum optics, which are interesting candidates for im- 
plementations of various quantum information processing tasks (see e.g. [2] and references therein). 
In order to describe such systems it is often more accurate and mathematically more elegant to 
follow an algebraic approach based on von Neumann algebras (cf. Section [2?T] for a motivation). This 
formulation has the advantage that physical symmetries can readily be included into the algebraic 
structure. 

In the special case that the von Neumann algebra is equal to the algebra of all linear, bounded 
operators on some Hilbert space, the smooth entropy formalism has been studied in |40j . It was 
shown that many results from the finite-dimensional case carry over via an inductive limit taken 
over all finite-dimensional subspaces. However, the assumption of a full algebra of all linear and 
bounded operators is often too restrictive. For example, the von Neumann algebra of a field of free 
bosons at finite temperature is not of this type [3]. 

The motivation of this work stems from questions in quantum key distribution, where rigorous 
mathematical proofs for security with continuous variable systems in the finite key regime are still 
absent (see e.g. |55|). Quantum key distribution is the art of generating a common secret key be- 
tween two parties using communication over a (unknown) quantum channel and an authentic classical 
channel. In the finite-dimensional regime, the smooth conditional min- and max-entropy are known 
to quantify the relevant informational tasks like privacy amplification |721 [93] and classical data 
compression with (quantum) side information |751 [76] [70] . Using these tools, the security of many 
schemes against general attacks then follows via a quantum exponential de Finetti theorem |721 [7T] 
or the post-selection technique |27] . But unfortunately these techniques fail in infinite-dimensional 
systems |26| . 



However, recently it was shown |92[I91) how to prove the security for a large class of quantum key 
distribution schemes by an entropic uncertainty relation with quantum side information, without 
making reference to a quantum exponential de Finetti theorem or the post-selection technique. In 
fact, since the early days of quantum key distribution, the intuition for security lies in the uncertainty 
principle |100[ [3 [38] . But from the perspective of quantum cryptography the uncertainty cannot be 
treated as absolute, but has to be considered with respect to the prior knowledge of a quantum ob- 
server |101[ ll2j. In Section [6] we prove such an uncertainty relation, which is a direct generalization 
of the finite-dimensional result in |92) . Hence, in order to follow the analysis in |92[ 191). it remains 
to generalize privacy amplification and classical data compression with quantum side information to 
our setup. 

Privacy amplification is the art of extracting a perfect key from a source which might be corre- 
lated to a quantum adversary and is not perfectly random |93[l72j. We discuss this in Section [71 and 
show, as a generalization of the finite-dimensional result, that the smooth conditional min-entropy 
characterizes the amount of extractable key. This is also important for device-independent quantum 
cryptography, where the aim is to prove security solely based on the obtained measurement statistics 
(see e.g. |47| I56| and references therein). So far, it was often implicitly assumed that the adversary 
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is modeled by a finite-dimensional system in order to apply the results on privacy amplification, an 
assumption which can be dropped now. 

In classical data compression with quantum side information one asks how much a classical mes- 
sage can be compressed, given that the receiver already has some quantum knowledge about it. In 
Section [HI we show that this task is characterized by the smooth conditional max-entropy, a result 
already known for the finite-dimensional case |70| . Afterwards privacy amplification and data com- 
pression are put together in Section [9l where we quantify the amount of distillable key for a given 
state; again along the lines of the finite-dimensional result |70| . We note that the detailed analysis 
of actual continuous variable quantum key distribution protocols is ongoing research, and that we 
do not give any security proofs here. 

Let us again briefly summarize how the paper is organized. In Section 12.11 we discuss why it 
benefits to use a von Neumann algebra approach to describe continuous variable systems. The for- 
malism of smooth min- and max-entropies and their use in quantum information theory is reviewed 
in Section [2.21 In Section [3l we begin with a brief introduction to von Neumann algebras, followed 
by a discussion of the relevant quantum information theoretical concepts on von Neumann algebras. 
We proceed with the definition of the smooth min- and max-entropies on von Neumann algebras in 
Section 21 and discuss some properties. In Section \5\ we address the operational meanings of the 
'non-smooth' min- and max-entropies. An uncertainty relation with quantum side information is 
proven in Section [6j The characterization of privacy amplification via the smooth min-entropy and 
data compression via the smooth max-entropy are derived in Section [7] and Section [51 respectively. 
This is followed by the discussion of an optimal quantum key distillation procedure in Section ^ We 
end with a summary of our results and a presentation of some perspectives concerning applications 
in Section [TOl 



2. Motivation 

2.1. Mathematical Models for Quantum Mechanics. The usual description of a quantum sys- 
tem in quantum information theory is as follows. The basic object for every physical system is 
a separable, or often even finite-dimensional, Hilbert space Ti and states are described by density 
operators. These are linear, positive semi-definite operators p from Ti to itself with trace equal to 
one. The evolution is described by either an unitary transformation U :% ^ %, oi a, measurement 
of an observable, which is given by a bounded, self-adjoint operator O on 7^(3 The expectation value 
of a measurement described by the observable O is computed as Tr(/30) if the system is in the state 
p. Multipartite systems are described by the unique tensor product of the Hilbert spaces of the 
individual systems. 

In contrast to this, in general quantum theory, especially in quantum field theory, the basic object 
for every physical system is a von Neumann algebra M of observables. Based on the usual approach 
as given above, this can for example be motivated as follows. Starting with a Hilbert space %, it 
is often the case that the physical system obeys certain symmetry conditions. Such symmetries can 
be due to the evolution determined by the Hamilton operator (dynamical symmetries) or postulated 
symmetries of the theory itself (superselection rules |42)). Typical examples are for instance Ising 
spin chains at zero temperature which are translational invariant, or bosonic systems which are 
invariant under particle permutation. Such symmetry constraints are realized by a representation 
vr of the symmetry group G on Ti, and the requirement that all observables O of the theory are 
invariant under group actions g & G, 



7r{g-^)07T{g) = 



There are more general ways to describe the evolution of a quantum system, which are introduced in Section 13.21 
But for the following explanatory discussion this is sufficient. 
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which is the same as saying that all physical states are invariant. If the group acts reducibly on 
T-L it follows that not all mathematical possible observables can actually be observed. Hence, the 
set of physical observables form a subalgebra of the linear, bounded operators B(T-L) on Ti. If H is 
infinite-dimensional, the imposed topological requirements on these subalgebras are, however, more 
subtle. Take a sequence Oi of observables such that Tr(pOj) is a convergent sequence for all density 
operators p onTi. It is then physically reasonable to require that a 'limit' observable O exists which 
give rise to this value. In other words, we would require that the subalgebra of physical observables 
is closed with respect to taking expectation values. This topology is usually called the cr-weak (or 
weak*) topology and a a-weakly closed *-subalgebra (invariant under taking the adjoint) of some 
Bili) is a von Neumann algebra M. States in the Hilbert space sense, i.e. density operators /?, now 
induce normalized, positive, normal (i.e. (T-weakly continuous) linear functionals Up : M ^- C via 

ujp{a) = Tr(pa) , 

for a & M. The basic idea of the algebraic approach to quantum theory, is to think of the von 
Neumann algebra M as constructed above, as the fundamental object. States of the system are then 
described by linear, positive, normal, normalized functionals on M. 

We could also choose the norm topology to complete a *-subalgebra of B{T-L). This would then 
lead us to the definition of a C*-algebra, which is more general than a von Neumann algebra. In 
particular, one often defines C*-algebras independent of the particular representation, i.e. by just 
requiring certain invariance properties under group actions. Every representation of this invariance 
group is then defining a different physical setup, or one could say 'phase'. However, once one chooses 
such a representation, i.e. a Hilbert space %, it is possible to close the observable algebra in the 
(T-weak topology and again end up with a von Neumann algebra. Hence, one could say that C*- 
algebras are the abstract objects defining the theory, whereas von Neumann algebras correspond to 
'physical realizations' of that theory. 

Multipartite quantum systems are usually modeled by tensor products of Hilbert spaces, the basic 
idea being that the observables of different parties should not influence each other and therefore 
commute. Thus, multipartite quantum systems in our setting are described by a von Neumann 
algebra Mabc with commuting subalgebras Ma^-^b^-M.c^ such that the algebra generated by 
Ma U A^b U A^c* is dense in Mabc- We note that such von Neumann algebras can not always be 
represented on product Hilbert spaces T-La ® T~Lb ® T~Lc- The question whether the possible correla- 
tions of multipartite systems modeled by commuting von Neumann algebras is richer than the one 
obtainable from systems with tensor product structure is an open question. For bipartite systems, 
this is known as Tsirelson's problem |94 1 159 [ [52} 1821 158) n From the perspective of quantum cryptog- 
raphy, this means that the set of possible correlations using von Neumann algebras might be strictly 
larger then the set of possible correlations in the standard Hilbert space approach. Note however 
that the results of this paper suggest, that it actually does not matter for quantum cryptography if 
Tsirelson's problem has a positive or a negative solution, since all relevant results are proven to hold 
even in the more general setting (see in particular Sections [7] and [9]) . 

The Hilbert space approach can be seen as a special case of the von Neumann algebra approach 
if the von Neumann algebra is isomorphic to a full S(?^)|j Such a von Neumann algebra is called 



It is known that Tsirelson's problem has an affirmative answer for a large class of physical systems, namely if the 
system's C*-algebra is nuclear and/or if the corresponding von Neumann algebra is hyperfinite. But note that this 
is in general a non-constructive statement, that is, one only knows that there exists a bipartite Hilbert space which 
reproduces the correlations. In addition the Hilbert space might not be separable (see [82| for a detailed discussion). 

Even for finite-dimensional Hilbert spaces, a von Neumann algebra does not have to be a full B{H) (although it 
is always a direct sum of finite type I factors). But in quantum information theory, one usually just models every 
algebra of observables as a full B{'H). In the spirit of cryptography, this assumption is reasonable in the sense that 
one does not want to restrict the eavesdropper's von Neumann algebra of observables in any way. But note that in the 
infinite-dimensional case, a restriction might be manifest because the von Neumann algebra is specified. See Section [7] 
for a detailed discussion. 
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a factor of type I and in this case - but only then - it is possible to use techniques as in |40) . But 
there are many von Neumann algebras occurring in physics which are not of such type. For example, 
a free boson field of finite temperature [3]. Here the invariance under particle permutation is the 
restricting symmetry. Another example of a non-type I factor are the algebras typically assumed to 
model the set of observables corresponding to a finite space-time region in algebraic quantum field 
theory [T8] . 



We conclude therefore that the von Neumann algebra approach is mathematically more general 
than the standard one using Hilbert spaces, and in favor because it is a unified framework for regular 
quantum mechanics, quantum statistical mechanics and quantum field theory. In Section [3l we give 
a concise introduction of this mathematical framework. 

2.2. The Smooth Entropy Formalism. This section contains a review of previously existing 
finite-dimensional results. The general framework for the von Neumann algebra setting is developed 
in Sections H] - [6l 

In quantum information theory, and especially in quantum cryptography, one is interested in 
multipartite systems. Concerning entropies, this means that one needs conditional measures. For 
bipartite systems AB, the smooth conditional min-entropy H^-^^ {A\B) and the smooth conditional 
max-entropy H^g^-^ {A\B) were introduced in |72 | [5^190] . These measures depend on the state p^s 
of the system and on a smoothing parameter e > 0, which typically corresponds to an error tolerance 
in information theoretic operational interpretations. The smooth min- and max-entropy are consid- 
ered as reasonable measures, because on one hand, they have many properties that are desirable for 
entropies, and on the other hand they quantitatively characterize basic information theoretic tasks. 
In fact, these two points should really be seen as the justification for their definition. 

For e = 0, the conditional min-entropy corresponds to the maximum achievable overlap with a 
maximally entangled state if only local operations on the part B are allowed, and the conditional 
max-entropy is related to the maximum fidelity with a product state that is completely mixed on 
A |54| . In the von Neumann algebra setting this corresponds to Corollary 15.11 and Proposition 15.51 
Another basic property that we would like to highlight here, is a useful duality relation between the 
two entropies. For a tripartite pure state pABC and e > it holds that |90j 

Based on this relation, one can derive an entropic uncertainty relation with quantum side informa- 
tion |92) , which corresponds to Theorem 16.11 in the von Neumann algebra setting. 

The smooth min- and max-entropies appear in information theoretic tasks like data compres- 
sion [75l [76l [To], channel coding problems [371 [TTl [771 [SZl [22l [971 [Ml [SQIj and privacy amplifica- 
tion |72|I93|. Moreover, similar quantities are used in entanglement theory |31 1 l21 | [20 l l23 | ll5|. Even 
though, the smooth min- and max-entropies are suited to study resources of general form, they are 
also useful as a technical tool to study iid resources |12^ I13| . This is because the von Neumann 
entropy is a special case of the smooth min- and max-entropy, which is established via the fully 
quantum asymptotic equipartition property |89) . 

3. Preliminaries 

Here we introduce the notation and the mathematical tools needed to describe quantum physics in 
the framework of von Neumann algebras. In Section [3?T1 we introduce the basic mathematical objects 
and fix some notation, whereas in Section 13. 2| we address the description of quantum mechanics in 
this framework. Among others, we define basic information theoretic notions like purifications, and 
also discuss special type of systems in greater detail. These are bipartite systems AB, where A is 
a finite-dimensional classical or quantum system and i? is a system modeled by an arbitrary von 
Neumann algebra. 
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3.1. An Introduction to von Neumann Algebras. This section is aimed to give a brief but, as 
far as possible, self-contained mathematical introduction to the theory of von Neumann algebras and 
the concepts used within this paper. For a more sophisticated introduction and further literature we 
refer to [l6l [HI [HH EH |88] . 

A *-algebra is an algebra A which is also a vector space over C, together with an operation * called 
involution, which satisfies the property A** = A, (AB)* = B*A* and {aA + /3B)* = aA* + (3B* for 
all A,B € A and a, f3 £ C If a *-algebra is equipped with a norm for which it is complete, it is 
called a Banach *-algebra. 

Definition 3.1. A C* -algebra is a Banach *-algebra A with the property 

(1) PM|| = \\Af , 
for all A£ A. 

Henceforth, A always denotes a C*-algebra if nothing else mentioned. Note that the set of all 
linear, bounded operators on a Hilbert space Ti, denoted by B{'H), is a C*-algebra with the usual 
operator norm (induced by the norm on Ti), and the adjoint operation. Furthermore, each norm 
closed *-subalgebra oi B{T-L) is a C* -algebra. 

A representation of a C* -algebra ^ is a *-homomorphism t: : A ^ B{T-L) on a, Hilbert space 7^. A *- 
homomorphism is a linear map compatible with the *-algebraic structure, that is, ^{AB) = t:{A)tt[B) 
and ■k{A*) = t:{A)* . We call a representation tt faithful if it is an isometry, which is equivalent to 
say that it is a *-isomorphism from A to t:{A). A basic theorem in the theory of C*-algebras says 
that each A is isomorphic to a norm closed *-subalgebra of a B{T-L) with suitable % |16| Theorem 
2.1.10]. Hence, each C*-algebra can be seen as a norm closed *-subalgebra of a B{'H). 

An element b £ A is called positive if 6 = a* a for a £ A, and the set of all positive elements is 
denoted by A+. A linear functional lo in the dual space A* of A is called positive if iv{a) > for all 
a S A-^. The set of all positive functionals A'^ defines a positive cone in A* with the usual ordering 
oji > UJ2 if (oJi — UJ2) G A\, and we say that ui majorizes W2- A positive functional oj G A* with 
||a;|| = 1 is called a state. The norm on the dual space of A is defined to be 

(2) ||a;|| = sup |w(3;)| . 

x&A,\\x\\<l 

A state CO is called pure if the only positive linear functionals which are majorized by co are given 
hy X ■ OJ for < A < 1. If ^ = B{'H) we have that the pure states are exactly the functionals 

uj^{x) = {C\xC), where |^) G Ti. 

Now we consider a subset of linear, bounded operators T C B{'H) on a Hilbert space T-L. The 
commutant T' of T is defined as T' = {a £ B{T-L) : [a, x] = 0, Vx G T}. 

Definition 3.2. Let % be a Hilbert space. A von Neumann algebra Ai acting onTi. is a *-subalgebra 
M C Bil-L) which satisfies M" = M. 

There are three other characterizations of a von Neumann algebra. One rises in the bicommutant 
theorem [161 Lemma 2.4.11]: a *-subalgebra M C B{T-L) containing the identity is a- weakly closed 
if and only if M" = A^ o From this we can conclude that a von Neumann algebra Ai is also norm 
closed and therefore a C*-algebra|j The definition of a von Neumann algebra can even be stated in 
the category of C*-algebras: a von Neumann algebra Al is a C*-algebra with the property that it is 
the dual space of a Banach space. Due to historical reasons this is also called a H^*-algebra. 



The cr-weak topology on 8(1-1) is the locally convex topology induced by the semi-norms A M> |Tr(ryl)| for trace- 
class operators r £ B{'H), see |16l Chapter 2.4.1]. 

We note that a norm closed subalgebra is not necessarily cr-weakly closed. Thus a C*-algebra on T-i is not always 
a von Neumann algebra. 
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In the following Ai denotes a von Neumann algebra. We call Z{Ai) = M D M' the center of 
Ai and Ai a factor if Z[Ai) consists only of multiples of the identity. A representation vr of a von 
Neumann algebra 7W is a *-representation on a Hilbert space % that is u-weakly continuous. Thus, 
the image 7r(A^) is again a von Neumann algebra. We say that two von Neumann algebras are 
isomorphic if there exists a faithful representation mapping one into the other. 

A linear functional w : TW — t- C is called normal if it is a-weakly continuous and we denote the set 
of linear, normal functionals on M by A/'(7W)|j We equip J\f{Ai) with the usual norm as given in ([2]). 
Then the set N{Ai) is a Banach space and moreover it is the predual of A^, which means that its dual 
space is Ai . The cone of positive elements in J\f{Ai ) is denoted by J\f^ {At ) |_| It is worth to mention 
that ||i:;;|| = a;(I) for all w € Af~^{Ai). We call functionals lo G J\f~^{A4) with the property ||a;|| < 1 
subnormalized states and denote the set of all subnormalized states by S<{Ai). Moreover, we say 
that uj G S<:{Ai) is a normalized state if ||a;|| = 1, and set S{Ai) = {oj £ S<{Ai) : \\uj\\ = 1}. For 
A1 C 13{T-L), we have that oj G S<{Ai) corresponds to the functionals for which a positive trace-class 
operator p on Ti exists, such that 

(3) ^p{x) = Tr(/jx) = uj{x) yx £ At . 

Such an operator p is called a density operator. 

Given two commuting von Neumann algebras A^ and A^ acting on the same Hilbert space Ti, 
we define the von Neumann algebra generated by A^ and A^I as A^ V A^I = (A^ U A^)", where 
A4 U A1 = spanjxy ; x G A1 ,y G A4}. According to the bicommutant theorem \16\ Lemma 2.4.11], 
A1 V A^ is just the cr- weak closure of A1 U A^. 

3.2. Quantum Information Theory on von Neumann Algebras. For motivations of the fol- 
lowing description we refer to Section 12.11 and references therein. We associate with every physical 
system a von Neumann algebra Al C fi('H), which is generated by the possible observables on this 
system. An observable is given by a positive operator valued measure (POVM), which consists of a 
measurable space (X, S) with cr-algebra S defining the values of the possible measurement outcomes 
together with an additive function i? : S — ^ A^_|. such that E{X) = I. Henceforth, we consider 
only observables with a finite number of measurement outcomes X = {1,2, ...,n}, which are then 
described by operators < E^ < 1 in Ai with the property ^^ Ex = 1- A measurement is called 
projective or of von Neumann type if the operators E^ are projections. A state of the physical system 
is described by a functional u G S{Ai). Given that we perform a measurement described by {Ex} 
on a system in the state uj, the probability to measure the outcome x is oj[Ex). 

The maps that describe possible evolutions of quantum systems are called quantum channels. A 
quantum channel from system A to system B described by von Neumann algebras AiA and A^_Bi 
respectively, is a normal, completely positive, unital, linear map £ : A^s — )• AiA (see |62| for proper 
definitions of these terms). Hence, if we prepare a system in the state uj G 5(A^yi), apply a quantum 
channel £ : A^s — )• AiA, and measure the observable {Ex}xeX, this yields a probability distri- 
bution p{x) = oj{£{Ex)). We can define the dual map £^ : N{AiA) -^ M{AiB) via the relation 
£.^{ijo){a) = oj{£{a)) for all a G A^b- £* then maps states onto states. Since N{Ai)* = A^ these 
maps are dual to each other. 

A multipartite system is a composite of different physical subsystems A,B,...,Z associated with 
mutually commuting von Neumann algebras AiA^-MB, ■ ■ ■ ^Mz of corresponding observables acting 
on the same Hilbert space Ti]^ The commutation relation comes from the assumption that the 



In standard von Neumann algebra notation JV{M) corresponds to the set M^. 

In standard von Neumann algebra notation Af^{M) corresponds to the set A4t- 

We can always assume that the von Neumann algebras act on the same Hilbert space. Otherwise, ii Ma C B{T-La) 
and Mb C B{'Hb), we consider the algebraic tensor product Ma (SiMb G 13{T-La (ST-Lb), and take the a-weak closure 
of Ma ® Mb in B{T-La ® Hb), which is equivalent to {Ma ® I) V (I ® Mb)- 
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subsystems are in space-like separated areas before performing measurements on single subsystems. 
The overall system denoted by AiAB...z is then given by the von Neumann algebra generated by the 
individual systems 

(4) Mab...z = Ma'^ Mb"^ ■■■'^ Mz ■ 

Throughout this paper we use the notation Mabc to indicate that we consider a multipartite sys- 
tem consisting of subsystems Ma, -Mb and Aic- For states on multipartite systems, the considered 
subsystems are indicated by subscripts. For example, a state on A4abc is usual denoted by coabc 
while COAB is the restriction of ujabc onto Mab- 

An important concept in quantum information theory is 'purification', which is essentially the 
completion of a system by adding a 'complementary' system. Assume that we have a state uja on 
a von Neumann algebra Ma- This state may be regarded as a state a; on a bigger von Neumann 
algebra Ai, which contains 7W^ as a subalgebra, provided the restriction of uj onto Ma ^s uja- Now 
the idea of purification is to choose an extension cj of coa such that co is pure. The name is justified 
by the property that no further extension of the system shows any correlation with the purification 
oj |87| Section IV, Lemma 4.11]: if a) G S{M) with M C M and u restricted to 7W is a pure state 
oj on M, then it follows that Cj{xy) = Gj{x)Gj{y) for sl\ x ^ M and y G M' n M. 

Definition 3.3. Let M he a von Neumann algebra and oj € S<{M). A purification of oj is de- 
fined as a triple {ir,T-L, \^)), where ir is a representation of M on a Hilbert space %, and ^ ^ % is 
such that uj[x) = {^\t^{x)^) for all x G M. Moreover, we call ^{M) the relevant and 'k[M)' the 
complementary system of the purification (vr,?^, |^)). 

Introducing a little abuse of notation, we say for short that uja'B is a purification of cj^ G S< {Ma), 
if there exists a purification (vr,?^,!^)) of uja such that Ma' = '^{■M.a), Mb = T^i-M-A)' and 
^A'b{^) = (C I^^C) for all X G Ma'B- Note that such a purification uja'b is in general not a pure state 
on Ma'B-, although the vector state uj^{x) = (^ |x^) on B{T-L) is. This complication arises naturally 
when defining a purification of states on von Neumann algebras, because the only states for which 
pure extensions on Mab exist are factor states |102)P1 Another important property of a purification 



(vr, ?^, 10) of UJA G S{Ma) is that vr is not required to be faithful on the entire Ma but only on the 
part 'seen' by the state uja- This means that Ma is in general not isomorphic to 'k[Ma) and the 
systems cannot be identified, wherefore we denoted tt{Ma) by A' instead of A. Beside the math- 
ematical convenience, this is justified because a purification is just a theoretical construct without 
direct physical relevance, and can therefore chosen to be state dependent |^ It is worth to mention 
that, we can choose for any von Neumann algebra M a particular representation vr on a Hilbert 
space "H, such that every state on M has a purification in %. This specific representation is called 
the standard form oi M (see Appendix |A|) . and ensures that any state has a purification. Moreover, 
by the Gelfand-Naimark-Segal (GNS) construction |16| Section 2.3.3] we can choose the purification 
(tt,^, \S,)) of a; G A^ to be cyclic, that is, % is the closure of {vr(x)|0 : x G A4}. A purification is 
therefore not unique, but all possible ones are connected by partial isometrics. 

Lemma 3.4. Let M he a von Neumann algebra, uj G S<{M), and {TTi,T-Li,\S,i)) with i = 1,2 two 
purifications of uj. Then there exists a partial isometry V : Tii — t- T-L2 such that V\S,i) = {(,2) o,nd V 
intertwines with the representations iTi, that is, V'7Ti{x) = tt2{x)V for all x £ M. 

Proof. We construct an explicit partial isometry V. Define V on {7ri(2;)|^i) : x G M} via T^vri(x)|.^i) = 
7r2(x)|^2)- This defines V uniquely on the closed subspace Tif C ?^i given by the closure of 
{-7ri(3;)|,^i) : x G M}. On the orthogonal complement of Tif, we set V equal to zero. One can 
now verify that the constructed V satisfies the required properties. CH 



A factor state is a state for which the Gelfand-Naimark-Segal (GNS) representation is a factor (see [161 Section 
2.3.3] for the GNS construction). The reason why pure extensions exist only for such states, is due to the fact that 
the GNS construction of a pure state is a factor and {Ma V Mb)' is equal to the center Z{Ma). 

In finite dimension, a purification is often chosen to be state dependent as well. Given a density operator pA on 
a Hilbert space Ha, a purification of pA is a rank one density operator Pa'b on some Hilbert space Ha' (ST-Lb, such 
that pa' = pA- But note that \A\ > \A'\ > rank(pA), and not necessarily \A'\ = \A\. 
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We now discuss bipartite systems Mab, where the system A is either classical with a finite 
alphabet, or quantum with finite dimension. 

Finite- Dimensional System, A. For an arbitrary set 7~, we denote by Mn{T) the n x n-matrices 
with entries in T, and set M„ = M„(C). A n-dimensional quantum system is defined as the von 
Neumann algebra M„\ i We are therefore interested in bipartite systems Mab = -Ma \/ Mb with 
Ma — Mn, and hence Mab — Mn <8) A^sEl An arbitrary element x G M„ (g) Mb can be writ- 
ten as a; = '^^j Eij (g) Xij, with Eij G Mn the matrix with entry 1 at {i,j) and elsewhere, and 
Xij ^ Mb- This allows us to identify M„ ® Mb with M„(7Wb) via x = (xij), where (xij) denotes 
the matrix with entry Xij at {i,j)- In standard 'bra-kef notation, Eij corresponds to the rank one 
element |i)(j|, where |i)i,...,n denotes an orthonormal bases of C". We will freely use both of these 
notations throughout the paper. The similar fact holds for normalized states u;ab on Mab in the 
sense that J\f{Mn{MB)) can be identified with M„(AA(A^b)). We use the notation ujab = (^b)^ 
where w^(6) = UAB^Eij (g) b) for all b G Mb and thus, obtain ujab{x) = X^j • a;^(xy) for x = {xij). 

We briefly note that the states on Mn{MB) are in one-to-one correspondence with completely 
positive maps from Mb onto M„ via the map coab i— ^ ^wi defined by (<^(^(6))jj = cj^(6), and its 
inverse ^ i— )• o;*^ given by a;*^((xjj)) = J2ij ^i^ij) EH Chapter 6]. 

Classical- Quantum States. A classical system in the context of quantum systems, is specified by the 
property that all possible observables commute, and is thus described by an abelian von Neumann 
algebra. In this paper we restrict to classical systems over a finite alphabet X. These are then given 
by the bounded complex valued functions on X, denoted by i°°{X) = i°°{X, C). Elements in i^{X) 
can be represented as finite sequences {Xx)x£X, and the norm is the supremum norm. Henceforth, we 
denote a classical system with alphabet X simply by X (instead of A), and also use the abbreviation 
^j^l for£°°(X) . 

A bipartite system consisting of a classical part X, and a quantum part B, is then described by 
the von Neumann algebra MxB = ^j^i ^-^B- This can be identified with the set of finite sequences 
ici'x)x£X, ax £ M.B, equipped with the norm 

(5) \\ia'x)\\eoo(MB) = ^^P IWxWmb ' 

x£X 

denoted by i?^,{MB) = ^°°(X, A^s). The set of normal functionals on ^j^, (^Mb is ^i^i (^M{Mb)- 
States on i?^,(S'MB are called classical quantum (cq-) states, and can be written as loxb = ('^^)^sX) 
where Wg G S<{Mb) such that u}xb{ci) = J2x^b(^x) ^^^ ^^^ ^ ~ ("^x) £ -MxB- The norm inherited 
from i}-^, i^M^Mb) is then given by 

(6) wi^iy mMB)) = Yl ii'^ikA^s) ■ 

x&X 
Note that £?^, Mb can be identified with ^x<^x -^b, and that states can be written as OJXB = 
(BxeX^B- Hence, we can think of i?^,{MB) as embedded into the quantum system M„(A^b) as 
the algebra of diagonal matrices with entries in A^^. Technically, this allows us to treat classical 
systems as subparts of quantum systems. In this spirit, we understand all the definitions made for 
quantum systems also for classical systems. 

Cq-states can be interpreted as post-measurement states, where the outcome is treated as a random 
variable. Since we consider only measurements with finite alphabets, the classical part of the resulting 



This corresponds to a full algebra of observables S(C"). As discussed in Section [2l not every finite dimensional 
von Neumann algebra has this form, although one always (implicitly) makes this assumption in quantum information 
theory. In the following we also make this restriction for the system A, because the restriction is not relevant for 
quantum cryptography; the relevant part concerns the system B. 

Since M„ is finite-dimensional, and thus nuclear, the tensor product is uniquely defined. 
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cq-state is finite. Let us assume that we start with a bipartite state ujab G ^{AiAB) on which we 
perform a measurement on the system A represented by the observable {Ex}xeX C Ma- The 
normahzed post-measurement states on Mb conditioned on the outcome x £ X, are described by 
^3; /][\ '^gi where uj^{a) = uJAB{ExCi) for all a G Mb- Note that Ci;^(I) is just the probability to 
measure the outcome x. Hence, if we treat the outcome as a random variable, the post-measurement 
state is the cq-state uxb = {'-^^)x&x- The map ujab ^^ {^%)x&x describes a quantum channel from 
Ma to the classical output space ^j^i- Conversely, for any cq-state ujxb = {^%)x&x on MxB, we 
can find a state ujab £ S{Ma y Mb) with suitable Ma and an observable {E^} C Ma, which give 
rise to ujxb- The measurement operators Ex can for instance be chosen as the non-commutative 
Radon-Nikodym derivative of w^ with respect to ^x^B (^^^ Appendix [B]). 

4. Smooth Entropies on von Neumann Algebras 

Throughout this section, we indicate multipartite systems with subscripts A,B, . . . where the asso- 
ciated von Neumann algebras are Ma,Mb, ■ ■ ■ The system A is always given by a finite-dimensional 
matrix algebra Ma = Af„, while the other von Neumann algebras are arbitrary. The definitions 
for a classical system with a finite alphabet X are obtained from the quantum case via the natural 
embedding into Mix\ as the subalgebra of diagonal matrices with respect to a fixed basis. 

4.1. Min- and Max-Entropies. Similarly to the finite-dimensional case, the concept of relative 
entropy is very useful |60j . The following generalizes one of the main definitions in |31| to the von 
Neumann algebra setting. 

Definition 4.1. Let uj,a G J\f^{M). The max-relative entropy of oj with respect to a is defined as 

(7) Dmax (w 1 1 0-) = inf {^ G M : w < 2^ • ct} . 

The max-relative entropy of oj with respect to o" is 00 whenever the condition cj < 2^ • cr can not 
be satisfied for any /i G M. This is the case if the support of uj does not lie in the support of a. The 
max-relative entropy can be reformulated in an operational way aa i 

Dn,ax(w II ct) = sup{loga;(^) : E G M + ,aiE) = 1} . 

In order to see this, one uses that uj < 2^-0" means by definition that uj{E) < 2'^a{E) for all E G A^ + . 
But this is equivalent to uj{E) < 2^ for all E G M+ with a{E) = 1. 

Based on the relative max-entropy we define the conditional min-entropy in analogy to the finite- 
dimensional case |72l I54| . 

Definition 4.2. Let Mab = Mn ^ Mb with Mb ol von Neumann algebra, and ujab G S<:{Mab)- 
The min-entropy of ujab conditioned on B is defined as 

(8) B.rnin{A\B)^= SUp {-Dmax ("^AB 1 1 TA (X" CTfi)} , 

crB&S{MB) 

where ta denotes the trace on Mn, i.e. ta{x) = Tr(a;) for all x G M„. 

Using the concept of purification on von Neumann algebras as introduced in Definition I3.3| we 
define the conditional max-entropy as the dual of the conditional min-entropy (as in |54| 190) for the 
finite dimensional case). 

Definition 4.3. Let Mab = Mn ^ Mb with Mb ol von Neumann algebra, and ujab G S<:{Mab)- 
The max-entropy of ujab conditioned on B is defined as 

(9) H^ax(^|i3L = -H^in(^'|C)^, 

with uja'B'C given by an arbitrary purification (7r,/C, |^)) ofujAB with Ma'B' = "^(Mab) the relevant 
system, and Mc = T^iMA'B')' the complementary system. 



From now on, we denote the logarithm of base two by log. 
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For simplicity, we often use a purification (7r,/C, |^)) such that 7r(A^^) is isomorphic to Ma, and 
simply write Ma for 7r{MA)- The next Lemma shows that the conditional max-entropy is well 
defined, that is, independent of the choice of the purification. 

Lemma 4.4. Let Mab = M^. <8> Mb with Mb cl von Neumann algebra, ooab G S<{Mab), o-'n-d 
(ttjj/Cj, \ii)) with i = 1,2 two purifications oJujab with TTi{MA) = Mai oind complementary systems 
Mci- Then 

(10) H^in (AilCi)^i = H^in {A2\C2)^2 , 

where i^\.(j. is the restricted state corresponding to |^j). 

Proof. The conceptual idea for the proof is from |90| Lemma 13]. According to Lemma [3.41 we know 
that there exists a partial isometry F : /Ci — )• /C2 with |,^2) = y\ii) and Vi^i^a) = ■K2{o)V for all 
a G Mae- Then it follows for aW x ^ Ma2 ® ^C2 that 

(11) ^McM = (^21x6)= {Ci\V*xV^i)=u\^cA^*xV) , 

where we used in the last equality that V*xV E Mai ® Mci- This follows from the fact that 
{Ma, ® McJ = M-^b) and for ah !</>), |^) G /Ci and y G Mb 

{(l)\V*xV7ri{y)i;) = {(l)\V*x7r2{y)Vip) = {<p\V*TT2{y)xVil;) = {(l)\7ri{y)V*xVtlj) . 

It follows from ([TT]) that ^AiCi — '^M ® ^Ci implies ^a2C2 - ^*i'^Ai i^ crCiW "^ith V*{ta-i 
aci)V{x) = TAi (8) aci{V*xV). But since V commutes with it2{Ma), it is of the form Va ® Vc 
such that V*{ta ® ac,)V = VXta^Va V^ac.VB. With V*ac,V{l) < cJCi(I) and VXta^Va < ta^ 
we can conclude that Hmin (j4i|Ci)j^i < Hmm (^21^^2)1^2. Since this argument is symmetric, we get 
equality. El 

Note that the duality relation Q does not conserve classical subsystems. Li particular, if we 
consider a cq-state loxb where the classical system X is thought of as the subalgebra of diagonal 
matrices in M|x|, then the reduced state of a purification ojxbc of ojxb on M|x| CS) A^c is in general 
not a cq-state anymore. 

An operationally more meaningful form for the conditional min- and max-entropy is derived in 
Section [5j Furthermore, we show some properties of conditional min- and max-entropies at the end 
of the next section directly for the more general smooth conditional min- and max-entropies. 

4.2. Smooth Min- and Max-Entropies. Smooth entropies are obtained by optimizing the 'non- 
smooth' entropies over nearby states. This includes the definition of a suitable distance measure 
on the set of states. The choice of this measure influences the properties of the smooth entropies 
crucially. Here we follow |90) and extend the 'purified distance' introduced therein, to the setting of 
von Neumann algebras. 

Distance Measures for Suhnormalized States. Let 7W be a von Neumann algebra, and uj,(t ^ S<{M). 
We define the fidelity in accordance with |95| as 

(12) FM(^,c7) = sup|(eie)|', 

TT 

where the supremum runs over all representations vr of A^ for which, simultaneously, purifications j^^) 
and I^J) of w and a exists. The subscript M denoting the von Neumann algebra will be suppressed 
if it is clear from the context. Furthermore, \i M C B{T-L) and oj a pure state state on M represented 
by \^J) S T~Li we define F_m{\^J), a) = F_m{uj, a). If one chooses a particular representation vr on 7^ in 
which OJ, a can be represented as vector states, and one takes arbitrary representatives |Ctj)) \^cj) G ^ 
of them, the fidelity can be expressed as [T] 

(13) F{uj,a)= sup KC^I^e.)!', 

where the supremum is taken over unitaries \J in 7r(A1)'. Since the optimization can be extended 
over the u-weakly compact set of all U with ||[/|| < 1, and the map U 1— t- {S,ui:US,a) is o"- weakly 
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continuous, we know that the supremum is attained. Note that the optimization over aU unitaries 
in the commutant is equivalent to the optimization over ah possible purifications of o" in "H. From 
this it follows that i<g(-^)(|'0), {(j))) = \{^p\(p)\'^ for all {ip), |0) G Ti. Another important property of the 
fidelity is that it can only increase under a quantum channel £ [1] 

(14) F{u;,a)<F{£{Lo),£{a)) . 

As a special case of this inequality we find that Fj^(io, a) > Fj\f{LJ, a) for M C M. 

The fidelity can be used to define distance measures on the set of normalized states |191 I41j . We 
generalize the fidelity in the same way as it was done in the finite-dimensional case |90) . such that 
it serves as the base of a distance measure on the set of subnormalized states. For that, we first 
introduce the concept of a projective embedding. Let Ai,J\f he a von Neumann algebras. Then we 
say that M admits a projective embedding of M, denoted by Mr\J\f, if there exists a projector 
p in AA such that pMp is isomorphic to A^|^ Note that this is equivalent to the existence of a 
projector p in M and a faithful representation vr of A^ into A" such that 7r(A4) = (l—p) (BpMp. This 
concept allows us to interpret subnormalized states as the result of an incomplete measurement. In 
particular, given lo G S<{M) and Mr\J\f with M = pNp. there exists an extended state u) G S{N) 
such that Cd{pxp) = lo{x) for x G A", where we identified A4 and pj\fp\ 1 We then interpret each 
measurement in M as incomplete and complete it by adding the no event (I — p), which leads to 
the same results as considering the state a; on A^. Based on the concept of a projecting embedding, 
the generalized fidelity is defined similarly as in the finite-dimensional case |90| . 



Definition 4.5. Let M he a von Neumann algebra, and a;,cr G S<{Ai). The generalized fidelity 
between a and to is defined as 

(15) Tm{^,o-)= sup sup Fj^{a,ui) , 

MrvAfui,aeS{Af) 

where the second supremum runs over all extended normalized states on A" such that Cd{p ■ p) on 
pj\[p = J\4 corresponds to uj and similarly for a. 



Due to Air\Ai © C, the generalized fidelity can be simplified as follows |90) . 

Lemma 4.6. Let M be a von Neumann algebra, anduj,a G S<{M). Then 

(16) -FA^(a;,a)5 = F^(w,<t)5 = FM(a;,cT)5 + (1 -a;(I))i(l - a(I))5 , 

where M=M®C, u} = u;®{l- uj{l)) and a = u ® (1 - cr{l)). 

Proof. The proof is conceptually the same as in |901 Lemma 3]. Let A" be such that Mr\J\f with p 
the corresponding projector such that M — pj\fp. Furthermore let (D, a be extensions of cj, o" on A" 
satisfying the required properties. According to the definition of the fidelity we have that Fj^{u!, a) = 
sup I (^5 I^J )p, where the supremum runs over all representations admitting a purification of oJ,a. 
Now note that all such representations vr are also representations of M, that Q = tt{p)S,^ is a 
purification of co, and that the same also holds for ^J = tt{p)S,^. We can then use the Cauchy- 
Schwarz inequality to compute 



{Co\c,)\ = \{c\c)\ + \{i^-pm\i^-pm)\<\{c\c)\ + vm-p)mm-p)m 



< I iC I C ) I + V(i-^(i))(i-^(i)) • 

Since this holds for all vr, we have that F^{u),(t)^ < F_M{uj,a)2 + (1 — a;(I))2 (1 — o-(I))2 for all A" 
such that Air\J\f and all suitable (D, cj on A/". Hence, we get 

J^M{oJ,(r)^ <FM(w,(T)5+(l-a;(I))5(l-a(I))^ . 
Finally it is easy to check that the specific choice Ai together with Cj and a achieves equality. D 



^^Note that if X C S(H) and V : H ^ TL' is an isometry, it follows that Mr\B{n') with the projector p = VV* [90] . 
Choose for instance uj{x) — uj{pxp) + (t((I — p)x{l — p)) with a G S<{Af) such that a{l — p) — 1 — aj(p). 
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The purified distance is then defined as in the finite-dimensional case |90) . 

Definition 4.7. Let M be a von Neumann algebra, and u),a £ S<:{Ai). The purified distance 
between uj and a is defined as 1 



(17) 'PM{(^,cr) = ^\ - J='M{oo,cr) . 

Like for the fidelity, we omit the indication of the von Neumann algebra for V whenever it is clear 
from the context, and write P_^(a;,cr) = VmHO^^) i^ \0 i^ ^ purification of w. For V{ijJ,a) < e we 
also use the notation w ~e cr, and say that lo and a are e-close. A detailed discussion of the properties 
of the purified distance can be found in |90| . Although their scope is restricted to finite-dimensional 
Hilbert spaces, many of the properties follow in the same way for general systems described by 
von Neumann algebras. It is for instance easy to see that the purified distance defines a metric on 
S<{M). The following Lemma shows the equivalence to the norm distance on N{M). 

Lemma 4.8. Let M be a von Neumann algebra, and u},a £ S<{Ai). Then 

(18) ,/\\Lo-a\\ + \uj{l)-a{l)\ > Vui'y,^) > \{\\^ - ^11 + H^) - ^(1)1) ■ 

Proof. The proof can be stated in the same way as in |90| based on the relation 

1 



1 - y^F{uj,a) <-\\u- a\\ < ^1-F(w,a) , 
where the first inequality was shown in |19| and the second one in |95| . D 

It is important that the purified distance is defined in such a way that it is monotone under 
completely positive, unital contractions. 

Lemma 4.9. Let M be a von Neumann algebra, u},a £ S<:{Ai), and E completely positive, unital 
contraction. Then 

(19) riLo,a)>ri£{uj),£{a)) . 

Proof. The finite dimensional version of this is |90i Lemma 7] . The lemma is a direct consequence 
of the definition of the generalized fidelity and equation (J14p . from which it follows that J^{u),a) < 
T{£{u;),£{a)). D 

Definition of Smooth Min- and Max- Entropies. The smoothing set around uo G S<{M) is defined as 
an e-ball in the topology induced by the purified distance. 

Definition 4.10. Let A4 be a von Neumann algebra, to G S<:{Ai), and e > 0. We define 

(20) B%^{u) = {aeS<{M):rM{uJ,cT)<e} . 

We usually omit the indication of the von Neumann algebra in the subscript of the smoothing set 
if it is clear from the context. 

Definition 4.11. Let Mab = Mn (8> Mb with Mb o- von Neumann algebra, loab £ S<{Mab) o-f^d 
e > 0. The e-smooth min-entropy of ujab conditioned on B is defined as 

(21) W^AA\B)^= sup H^in(A|B)^ , 

WAS GB' (was) 

and the e-smooth max-entropy of ujab conditioned on B as 

(22) H^ax (^1^). = inf ^ H^ax {A\B)^ . 



The name purified distance conies from tlie finite-dimensional case, wliere the purified distance between two states 
corresponds to the minimal ii-distance between purifications of these states. It is straightforward to see that the same 
result also holds in the von Neumann case, namely, Vm{^,o') = | inf^ |||G)(GI ~ 1?ct)(Cct|||i, where the infimum runs 
over all representations of A^ in which u and a have a vector representation denoted by |^J) and |^J), respectively. 
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Note that for e = 0, we retrieve the conditional min- and max-entropy, respectively. This is due to 
the fact that the purified distance defines a metric on 5<(A1ab)- Furthermore, if the A system is a 
classical system X, the optimization for the smooth conditional min- and max-entropy of a cq-state 
OJXB £ SkIMab) can, without loss of generality, be restricted to cq-states in i3j^ (coxb)- 

Lemma 4.12. Let Mb be a von Neumann algebras, X be a set of finite cardinality \X\, and UJXB S 
S<{(.'^{X)(^Mb)- Then 

HU(^|i?L= sup H^in(X|i?L 

H;nax(^I^L= inf H^ax(X|i?)^ , 

'^xsGB^q(wxs) 

where BI^{ujxb) ■= WxB G S<{l'^{X) ® Mb) ■ V{ujxb.<txb) < e}. 

Proof. The proof can be carried over from the finite-dimensional case, discussed in \J2\ Remark 3.2.4] 
for the min-entropy, and in |70| Lemma 3] for the max-entropy. For the sake of completeness we 
sketch the idea. In the following let oJxB G B%i 0_a4 {'^xb)- Let 8 : 1^{X) — t- M\x\ be the quantum 
channel which projects onto the classical basis of X. It follows from equation (J19p that £®id{uJxB) G 
B^Aojxb): and a straightforward calculation shows that Hmin (^l-B)^^ < Hmin (-^|-B)£-^jj/j^\. This 
proves the part for the min-entropy. For the max-entropy we take a purification {\S), tt,^} of uJxB 
on a Hilbert space T-L = C'"^' ®£}^\ (s^T-Lb, where Mb acts on TIb and the complementary system of 
MxB is given by Mx'c = ^\x\ '^ t^IMb)- By the duality between the min- and max-entropy the 
problem passes over to show that Hmin {X\X'C)^ < Hmin {XlX'C)^ ,®id(iii) ^°^ ^XX' the projection 
onto the subspace given by P^^ = Y^^^^ \x){^\ ^ l^)(^l> while the cq-state given by the restriction 
of £xx' '^ id(a)xBc) onto MxB is still in B'j^.j ^j^ {ojxb)- But this follows in complete analogy 
to [701 Lemma 3]. D 

The ball i3^(-) is chosen in such a way that the smooth conditional min-entropy is unaffected by 
freedoms which could potentially come from the non- uniqueness of purifications. This can be seen 
as the smooth analogue of Lemma 14. 4| and is connected to the fact that the smooth min-entropy is 
independent under a projecetive embedding of the physical system into a larger one. 

Lemma 4.13. Let Mab be a bipartite von Neumann algebra, coab G S^IMab), ('''"ii^i) !'?«)) with 
i = 1,2 two purifications of uab with MAi = T^i{MA) cind complementary systems Md, O'^d e > 0. 
Then 

(23) H^in(yll|Ci)^i = H^in(A2|C2)^2 , 

where uj\.(j. is the restricted state corresponding to \ii) ■ 

Proof. The ideas for the proof are adapted from |90| . First, we observe that due to the symmetry of 
equation ()23p it is enough to show inequality in one direction. According to Lemma [3. 41 we know that 
there exists a partial isometry V : fCi ^ IC2 with 1^2) = ^iCi) and y7ri(a) = 712(0)^ for all a € Mab- 
Furthermore, we know from the proof of Lemma 14.41 that for all (Ja^Ci ^ S<{MaxCi) the subnor- 
malized state V*aAiCiV{x) = aA-,cA^*x^) on MA2C2 satisfies Hmin (^i|Ci)^ < Hmin {A2\C2)y,„y 
and V*uj\^(jV = io\^c2- Hence, 

Hmin(-4l|Ci)^l = sup Hmin(^llC'i)^ < SUp Hmin (-42|C2)y.^y , 

and the only thing which is left to prove is that V*aAiCiy G ^'^(^A2C2^ ^^^ ^^^ '^^iCi S ^'^(^AiCi)- 
But this is equivalent to show that J^{uJAiCn'^AiCi) < •^(^*'^AiCi ^, ^*<7AiCi^)- Letp = VV* be the 
projector onto the image of V. Since PMA2C2P is a von Neumann algebra and V*ojaiCiVi ^*<7AiCi^ 
have support projection p, we can use Definition 14.51 to compute 

^Ma2C2 i^*^AiCiV, V*o-AiCiV) = ^pMA2C2p'y*^AiCiV, V*aAiCiV) = sup supFx{0, a) 

PMA2C2P ^A^ '^'^ 

- ^MAicS'^'^iCii^AiCi) =-^XaiCi(^AiCi>^AiCi) , 
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where MaiCi ■, '^\ c ' ^MCi are like in Lemma [4.61 and the inequahty follows from PM.A2C2P ^^-^AiCi 
via the isometry ^ © 1, and 'jj\^Ci ' ^MCi are extensions of V*iOAiCiy, ^*CyliCi^ in accordance with 
dED. ' ' D 



Next we show that the duality relation also holds for the smooth min- and max-entropies. 

Proposition 4.14. LetAiAB be a bipartite von Neumann algebra, ujab G 'S<{Mab), ('^j^jIO) "^^ 
arbitrary purification of ujab with complementary system Mc = T^iMAB)' , CL^d e > 0. Then 

(24) HU(^|i3L = -HU(^|CL • 

Proof. The ideas for the proof are adapted from |90) . Because of Lemma [4. 131 we can assume that tt 
together with /C is a standard form of Ai (see Definition IA.2P such that each state in Mas admits 
a purification in /C. According to the definitions of the smooth entropies we therefore have to show 
that 

(25) sup Hi„in(^|C)|5^) = sup R,nin{A\C\ , 

where |.^o-) G A^ is a purification of gab- From Lemma 14.41 we know that the min-entropy does 
not depend on the particular choice of the purification |,^o-)- We can therefore choose \^fj) such that 
^MAB{^AB,<yAB) = ^B{H){i^i^)^ and thus, 

VMAB{^AB,OAB)=VBi'H){\e)Ma))>VMAcM)Ma)) , 
from which '< ' in (j25p follows. In order to proof the opposite direction we observe that there exists 
a von Neumann algebra N C B{1C) such that Mabc ^>AA and each state r]AC has a purification 
.^^ in ^|_3 Let p be the projector such that Mabc is isomorphic to pj\fp and identify pK, with /C. 
Hence, we can find a purification |^) of ujab in ^ with p\^) = |^). Moreover, we know that for all 
riAc exists a |^^) G JC with T'MAci'nAC^Ac) = 'Pb(IC)(\Oi ICr?))- Thus, 

sup Hmin(^|C) = sup Rrain {A\C) :■. = SUp Hmin (^|C) , n , 

VAC&BH^AC) lllx>li<l,7'B(^)(IO,lx»<^ II|X>II<1,7'8(^)(|C>,|X»<^ 

where the last equality is due to Mabc — pJ^P, wherefore \x) and p\x) induce the same states on 
■M.ABC- Since 'Pis(jc)i\0 Ax)) ^ 'PmabHOAx)) and each t]ab admits a purification in /C, we find 
'> ' in (1251). D 



4.3. Elementary Properties of Smooth Entropies. The smooth conditional min- and max- 
entropy exhibit some nice entropic behaviors. An important one being that local operations on the 
system B can never decrease the uncertainty about the system A. This is called the data processing 
inequality, and is shown for the finite-dimensional case in |90| . 



Proposition 4.15. Let Mab = Af„ ® Mb and Mc be von Neumann algebras, ujab G S<{Mab), 
£ : Mc -^ Mb o quantum channel, and e > 0. Then 

(26) HU(^l^)a. < HU(^|C)id^^^.(,) 

(27) H^ax(^l^)a. < HU(^|C)id.,®£.M ■ 

Proof. The ideas of the proof are adapted from |90| Theorem 18]. We first consider the case for the 
conditional min-entropy for e = 0. Because £ is completely positive, we have that uab ^ ta® ctb 
implies idyi iS<)£^:{uJAB) < ta (^£*{(7b)- Furthermore, since £ is unital, we find that £^{aB) G S{Mc) 
whenever aB G S{Mc)- Together with the definition of the conditional min-entropy, the inequality 
follows. For e > 0, the inequality follows straightforwardly by using the fact that the purified 
distance is monotonically decreasing under quantum channels ()19p . Now we lift the property from 
the smooth conditional min- to the smooth conditional max-entropy via the duality. For that we 
take a purification ('H,7r, |^)) of u^ab on % = TLa ® "H-A' ® T~^B with %a = 'Ha' = C" such that 



^^We can choose the standard form to be /C = C" (g) C" (g) H^ with H^, M% a standard form of Mb- We 
then have that the complementary system is Mc = C" ® {Mg)'. Hence we can choose K. = C" ® 1-1% and M = 

M^.®M%\/[M%)'. 
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tt{Ma) = {^{T-La) and 7r(A^B) C B(T-Lb)- We remark that the concatenation £ = ttoS. is a completely 
positive, unital map from Mc onto 7r(A^s). Due to Stinespring's dilation theorem |62| there exists 
a Hilbert space I-Lq = "H-R © "H-B, a representation vr^: of A^c on He, and an isometry V : Hb — ^ ^c 
such that £{a) = V*'Ks{a)V for all a G A^c". Hence for all y G Mac 

[idA ® f*(^AB)](y) = WAi?(idA © ^(2/)) = (e I(Iaa' ® V*){idA ® TTe){y){^AA' ®V)0 , 

wherefore we can conclude that (Tijir^, Iaa' (^V\^)) is a purification of idA®£*i^AB)- If we denote 
Mb' = TT{MBy, Mc = T^e{Mc) and My^c') = ^*^£'(-^c)'^, we obtain from V*Tr£{Mc)V C 
Mb that Mb' C A^yfC")- Because the map x — t- V*xV from A^c into y(Al(7/) is unital and 
completely positive, the restriction on a subalgebra is a quantum channel and 1(8) y*y|^) = |^), we 
obtain via the duality 

Hmax (^|C)idA8)£.H = "Hrnin (^1^ C* ) jg,y|^^ > H^jn (^1^ ^(C )) |^^ 

D 

As a special case of the data processing inequality we get for von Neumann algebras Mc C Mb, 
that W^,^{A\B)^ < HU(^|C)^, as well as W^,,{A\B)^ < H^,,(A|C)^, where we utilized that 
the restriction of a state onto a subalgebra, is a quantum channel. Furthermore, we also obtain 

for uiABC a purification of a;^^ G 5<(A^ab)- Since the system A is assumed to be finite-dimensional, 
we can conclude that the smooth conditional min-entropy is always finite. The same argument also 
shows that the smooth conditional max-entropy is always finite. 

5. Operational Interpretations of Min- and Max-Entropies 

The definition of good entropy measures ultimately boils down to the question of their opera- 
tional significance. For the non-smooth min- and max-entropies we derive them in Theorem 15.11 
and Theorem 15.51 respectively. For an operational interpretation of the smooth min-entropy we 
refer to Section [71 where we link it to privacy amplification for the special case of cq-states. The 
smooth conditional max-entropy of cq-states characterizes classical data compression with quantum 
side information, see Section [HI For more about possible operational interpretations of the smooth 
conditional min- and max-entropy analogous to the finite-dimensional case, see Section [TOl 

Min-Entropy. We generalize the operational meaning of the conditional min-entropy known for finite- 
dimensional |54) and separable |40) Hilbert spaces. 



Theorem 5.1. LcIMab = Mn^Ms with Mb o- von Neumann algebra, loab = {^^b) ^ 'S<(Mab), 
and \^AA') = Y17=i I't'i) ® \'^i)> where {!</>«)} and {\ipi)} are orthonormal bases ofC^. Then 1 

(28) 2^«-''^(^l^)- = supF{{idA(E)£.){oJAB), \<^AA')) , 

where the supreniuni is taken over all quantum channels £ : A/„ — t- Mb- 

The proof developed in the following is conceptually different to the finite dimensional one in |54) , 
and is based on the theory of ordered vector spaces |64| . In particular, we employ the fact that 

Hmin (^l-S)a; ^^ ^^ Optimization problem over a subcone of A/'~^(A^ab)- For loab = (^b) ^ 'S<iMAB) 
we write 

2-Hmin(^|B)„ = inf inf{A : A • ta © as > ujab} 
(7b<^S{Mb) 

= inf{o-s(I) : TA ® o-ij > was, cfb G AA+(A1b)} 
= inf{/i (o-ab) : cfab > ^^AB, oab G -E} , 



The difference of a square in comparison to |54l 140) is due to the different definition of the fidelity. 
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where Mvab) = t^VabW for tjab G AA(A^ab), and ^ = {ta (g) ??b : ?7ij G M^{Mb)} with M^'{Mb) 
the set of hermitian functionals on A4b- Considering M (Mab) as a vector space, we have that 
i? is a subspace oi J\f (AiAB), and that fj defines a positive functional on J\f {Mab)- The basic 
ingredient is now the following extension result for functionals in an ordered vector space. 

Lemma 5.2. |64| Lemma 2.13] Let V he an ordered real vector space with a full cone V^ , E dV 
a subspace which majorizes V~^ , w G V\E, and f : E ^ M a positive functional on E. Then there 
exists a positive extension fonV such that 

(29) f{w) = Uf{w) := inf{/(t;) : v>w,veE}. 

Moreover, it holds for all positive functionals gonV with g\E = f, that g{w) < Uf{w). 

If we take V = M {Mab) with the cone of all positive functional V^ = J\f'^{M.AB) and E as 
defined above, then E majorizes V'^ . According to the definition of the predual, the set of all positive 
functionals on V are given by the positive operators in Mab- Hence by applying Lemma 15.21 with 
f = fj, we find the following proposition. 

Proposition 5.3. Let Mab = Mn (E> Mb with Mb o, von Neumann algebra, and ujab = (^b) ^ 
S<{Mab)- Then 

(30) 2-H-''^(^l^)" = sup{^a;^(M,,) : (M,,) G (M„(A^b))+, ^M,, = 1} . 

ij i 

Proof. The only thing left to proof is ^^ Ma = I. But this follows from the fact that the linear 
functional given by (Mij) restricted to E, has to be /j, and thus (ta(X'(Ts)((Mjj)) = ^- aBiMa) = 1 
for ah aB G S{Mb)- Since {M{Mb))* = Mb this implies J2i ^u = 1. □ 

By the help of (|30p we can now prove Theorem 15.11 

Proof of Theorem \5.1[ First, we show that there exist for each operator M = (Mij) G (M„(7Wb))"'" 
with ^- Ma = I, a quantum operation £m such that 

(31) F{{idA^£M){uJAB),\<^AA')) = J^W^(Mij) . 

ij 

Then we show the opposite, namely that for each quantum operation £ exists M G {Mn{MB))~^ 
with X^j Mj^ = I such that (|3ip holds. Together with Proposition 15.31 this implies the statement. 
For M = {Mij) G (M„(A^b))+ with J2i ^n = I we define the map £m via £Mlcr) = {a{Mijy^) for 
a G H{Mb)- Here, the states are with respect to the fixed basis in Mn given by (iV'j)}) such that 
for A = X- ■ aij\'ilji){ipi\, {a{MijY^){A) = ^^ • aija{Mij). It is straightforward to check that £m is a 
quantum operation and satisfies (|3ip . For the opposite direction we define for an arbitrary quantum 
operation £ the operator M^ via Mf- = £*{\tpi){ipj\). From the fact that £* is completely positive 
and unital, it follows that M is positive and ^^ M,^ = I. A short computation shows that the 
relation (|3ip holds for £ and M^ as constructed. D 

Guessing Probability. The analogue of Proposition 15.31 for cq-states leads to the guessing probabil- 
ity |54j . We start with a cq-state coxB = i'^B)^^^ ^^ i°°{X) Mb, where the classical part given 
by the finite alphabet X is hold by Alice and the quantum part Mb ^y Bob. Bob wants to guess 
the classical variable hold by Alice by applying the optimal measurement on his part. The guessing 
probability characterizes the probability that Bob's guess is correct. That is, 

(32) Pguess{X\B)^ = snp{^ LO%{E^) : E^ G Mb, E^ > 0, J^^o: = t} ■ 

Proposition 5.4. Let MxB = 1°^{X) ® Mb with Mb be a von Neumann algebra, and ujxb G 
S{Mxb)- Then 

(33) H^in {X\B)^ = - logpgucss(X|5)^ , 
with pg^css{X\B)i_j as defined in p2|) . 
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Proof. The proof is a simple application of Lemma [5.21 As in the last section, we write the conditional 
min-entropy as 

2~RmUX\B)^ = inf{/i(axB) : ctxb > ^XB, (JXB G E] , 
where E = {e (iS> o'b '■ ctb € A4b*} with e = (1, . . . , 1). Using Lemma [52] with V = ^}x\(-^b) and 
V~^ = £}-^,{A4b)+ the assertion follows. D 



Max-Entropy. In accordance to the finite-dimensional case |54j . we find the following operational 
meaning of the conditional max-entropy. 

Theorem 5.5. Let Mab = Mn (X" TWb with A4b o- von Neumann algebra, and ujab = i^s) ^ 
S<{Mab)- Then 

(34) 2"--(^l-^)- = sup F{ujab,ta^c7b) , 

where ta denotes the trace on M„. 

Proof. We prove inequality in both directions in a similar way as in the finite-dimensional case |54| . 
Recall that each state in Mab can be purified in the standard form, that is, in M„ (8) M„ (^ ■M.'^, 
where M.^ ^^ ^ standard form of Mb- We denote the purifying system by Ma'B' since it consists 
of a copy of the A-system Ma' = ^n and the commutant Mb' = (-^b)' °^ ^^^ system B. Thus, 
■Maba'B' C B{K,) with K. = C^" ® Tifj,. Let now .^^ G /C be a purification of loab and |$yiA') a 
non-normalized maximally entangled state on A4aa' as in Corollary 15.11 thus a purification of ta- 
Then with 7/0- G Ti^ a purification of o" G S{AiB), we find that 

F{uJAB,TA0(7b) = sup \{Clu\U{^AA' ^V^))]"^ = sup Fb(^ic){U^^,^AA' f^Va) 

< sup -Fm^^, (C/Cl.;, ^AA' ® ria) , 
U&Ma'b' 

where the supremum is taken over unitaries U in Ma'B'- According to Stinespring's dilation the- 
orem |62) . applying a unitary followed by a restriction of the state is a quantum operation, such 
that the state on Maa' described by U^uj can be obtained by applying a quantum operation 
£u : M{Ma'B') ~^ -^{Ma') on coaa'B'- Hence together with Corollarv 15.11 

F{ojAB,rA®aB) < supFM^^,i{idA®£u){u}AA'B',^AA') < 2-H-'"(^l^'^')- = 2^— (^1^)" . 

Taking the supremum over all aB G S{A4b) we find the inequality in one direction. In order to show 
the other direction, we note that according to Corollary 15.11 there exists for all (5 > a quantum 
operation £ : Af{M.A'B') -^ AA(M^/) such that 

(35) 2^— (^1^)- < FiiidA £){u;aa'B'), \<^aa')) + <5 . 

Let now \£,i^s) be a purification of (id^B (8> £){^ABA'B'), which can always be found on the extended 
system M-aa'CBB', where Mc = Mn2. With an arbitrary |0) G C"" (8) T-L(j), we obtain 

F{{[dA^£){uJAA'B'),\^AA'))= sup \{^^e\U{^AA"^0))\'^ 

< sup FM^s{\Le),\'^AA')<S)\Ue)) . 

Since the reduced state of \i^e) on Mab is ojab^ and there exists for all gb G S{Mb) a purification 
of the form \U9) with U unitary in Mdbb'j we arrive at 

(36) 2"™(^l^)- < sup F{u;ab, ta (g) 0-5) -F <5 . 

aBeS{MB) 

Because this holds for any 5 > 0, we found the inequality in the other direction. D 
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6. Entropic Uncertainty Relations 

One of the most fundamental concept in quantum mechanics is the uncertainty principle. It im- 
plies that even if one has full classical information about a system, it is impossible to predict the 
outcomes of all possible measurements. That is, one has an inherent uncertainty about possible 
measurement outcomes, and since entropies are measures of uncertainty, it is manifest to quantify 
this uncertainty using entropy measures (see |991I14| and references therein). Recently it was realized 
that if one allows to have quantum information about the system in question, the situation qualita- 
tively changes and one has a subtle interplay between uncertainty and entanglement (between the 
observer and the system). This effect was quantified by entropic uncertainty relations with quantum 
side information |12^ [68l \92\ \28\ [29] . Note that the scenario is particularly suited to study quantum 
cryptography, because the adversary might have quantum information as well. 

Here we first describe the setup we are interested in, and then state our main theorem; an entropic 
uncertainty relation with quantum side information (Theorem 16. ip . which is a generalization of the 
finite dimensional result in j92j . The application of this relation to concrete physical systems is 
ongoing research and will be discussed in a forthcoming paper. 

Like in |92| we start with a tripartite quantum state coabc ^ind apply a POVM {-E^} or {F^} on 
system A. We are then interested in the uncertainty system B and system C have about the post- 
measurement probabilities generated by {-E^} and {F^}, respectively, and quantify the uncertainty 
in terms of the smooth conditional min- and max-entropy. Note that the general von Neumann 
algebra version of the uncertainty relation given below (Theorem 16. ip can not be proven in this 
generality by using the techniques of 



Theorem 6.1. Let Mabc ^e a tripartite von Neumann algebra, uabc £ S{Mabc)j {^li ^^^ 
{F\} POVM's on Ma, and e > 0. Then 



(37) H^ {X\B)^ + H^,, {Y\C)^ > - logmax (^1)2 • (F^)2 

where ujxb = (t^s) with uj%{-) = ujab{E^-), and coyc = i^c) ^*^^ ^c(') ~ ^AciFA') are cq-states 
on Mb and Mc, respectively. 

We will derive this theorem from a more general result. But first, we have to introduce some 
notation. Let Ma be a von Neumann algebra, and consider a completely positive, unital map 
£ : M„ -^ Ma- As we can always embed Ma C B{T-L) faithfully for some %, we can apply 
Stinespring's dilation theorem to £. Hence there exist a Hilbert space %' ^ a representation vr of M„ 
on %' and an isometry V :% -^ Ti' , such that 

£(x) = V*7r{x)V . 

Since M„ is a finite-dimensional algebra, we can choose Ti' to be isomorphic to C" (8> C (8> H with 
1 < d < n, and vr of the form 7r(x) = x (8) I^ (8) I-^ . If Mr C M'^^, is a von Neumann algebra, then 
we can extend i5 to iS : M„(A^/j) — )■ Mar by setting 



£[^x,, ® \i){j\) = J2 (y* (1001 » td^tnW 

ij ij 

for {|i)}"^;^ an orthonormal bases of C" and Xij S Mr. The fact that Mr is in the commutant 
of A^^ assures that the map is still completely positive. In the following, we will abbreviate the 
right hand side of the last equation as V*x ® Id V^, for x E Mn{MR). Correspondingly, any map 
T^ : C" (g) C^ (g) H -> C" (g) C^ H can be used to define a completely positive map Tiy : M^ -> 
Mn{MA) C^(C"8)H) via 

Tw : \k){l\ ^ TtdiW* In \k){l\ ® In W*) . 



THE SMOOTH ENTROPY FORMALISM ON VON NEUMANN ALGEBRAS 21 

We denote by c{W) the norm of the associated Choi-matrix of this map, that is, 

(38) c{W) = \\Y,\k){l\^Twm{l\) 

k,l 
We are now prepared to state the general theorem from which Theorem 16.11 can be deduced. 

Theorem 6.2. Let Mabc be a tripartite von Neumann algebra, ujabc £ S{Mabc)j ^ ■ -Me -^ -Ma 
and Q : Aic ~^ -Ma completely positive unital maps, their support Me — Mn',MG — ^n being 
matrix algebras, and e > 0. If U (resp. V) denote the implementing isometries corresponding to the 
Stinespring dilation of £ (resp. Q), then 

(39) HU(i5;|S)^ + HU(G'|C), > -\ogc{UV*) , 

where ujeb{x) = ooABi^ix)), ujcciv) = ^Ac{0{y)), and c(.) is defined as in ()38p . Note that the 
quantity c{UV*) does not depend on the choice of the particular Stinespring dilations U,V . 

Proof. The proof rehes on the ideas developed in [92], and can in fact be regarded as the dual version 
of it. Let 7^ be a Hilbert space such that Mabc C B{T-L) is faithfully embedded and there exist a 
purifying vector |^) G Ti for coabc, i-e. (^abc{x) = {ip Ixip). We denote by [/ : ^ — ;• C" ^ C^ ^T-L 
and V : Ti ^ C^ (S) C"' (8) ^ the isometries of the Stinespring dilations corresponding to £ and Q, 
respectively, as explained in the discussion preceding the theorem. Due to the fact that 1-0) is a 
purification of ujabCi we have that 

{Vi; \x IrfF^ ) = (V \g{x)i; ) = ujABc{G{x)) = ujgc{x) 

for x £ Mgc- MniMs), implying that (idM„ (^ I^ (g) I-^, C" ® C^ (g) 7^, V] ■(/')) is a purification of wgc- 
Denoting the commutant M'abc ^^ B{'H) by Md, we get that the corresponding complementary 
system is equal to M(i{Mabd)- An analogues argument provides a purification (idM , ® '^d' ® 
I-^,C" C (1^1-L,U\iIj)) oiojEB with complementary system Md'{MACD)- Since 

Hmax {G\C)^ = -H^in {G\dABD)y^^^ 
follows from the duality relation of smooth entropies (Proposition I4.14p we have to show that 

B.%^^{G\dABD)y^^^ < HU(^|i?)^|^^) +logc , 

where c = c{UV*) as defined in ()38p . We first prove the theorem for the case e = 0. By the operational 
characterization of the conditional min-entropy (Proposition I5.3p the last inequality then amounts 
to 

sup{(V'|^7*x® Id'^/V-) :xGM„/(7WB)+,Tr„/(x) < I^} 

<c-sup{{tP\V*yVtP) : y G M„d(A^ABD)+ , Tr„(y) < Id' ^ In} ■ 

Since V*V projects onto Ti and U\^) = UV*V\ip) the last inequality would follow from 

(40) TvniVU* X <S) Id' UV*) < c-Irf/(g)Tr„/(x) 

where x £ Mn'{MB)- Expanding into coefficients with respect to an orthonormal basis of C"'" 
(£^d,d ^ .^g ggg ilig,i the last inequality is true for c being the norm of the matrix 

d' n n' d 

E E E E {im\UV*pk) {pi \VU*jm) \k){l\ ^ \i){j\ = J^ |A.)(/| Tuv<\k){l\) 

m=l p=l i,j=l k,l=l k,l 

as an element in M„/^(7W^). This concludes the proof for the case e = 0. If now e > 0, take 
an element YcdABD °^ ^'' (y\'4') GdABo) ■ Here V\'4))GdABD denotes the vector state V\iIj) restricted 
to Mndi-M-ABo)- Hence, according to the discussion in Section |4.2| there exist a purifying vector 

IV'y) e C" ^ C^ 7^ of Yg^abd such thalE] 

-F(y|V>,|#»>l-e2. 
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This can always be assured by making % large enough, i.e. by considering the standard form of Mabc- 



22 THE SMOOTH ENTROPY FORMALISM ON VON NEUMANN ALGEBRAS 

Again using that C/|^) = UV*V\'tlj), and the fact that VV* is a projector, we find 

T{U\i^), UV*\rv)) = T{UV*V\tP), UV*\r)) >l-e\ 

implying UV*\iIjy)eb £ S^iU\il^)EB)- Since the smooth min-entropy is given by the supremum of 
the min-entropy over all elements in the e-ball, the result follows by repeating the discussion leading 
to equation (|40p . D 



Remark 6.3. Since POVM's are special cases of quantum operations, their support being ahelian 
von Neumann algebras, Theorem \6.1\ is just a special case of Theorem \6.2l Assume for simplicity 
that \X\ = \Y\ = n, and think of P^ as the suhalgehra of diagonal matrices in Mn- The corresponding 
isometry for E : £^ — )■ Ma, &x ^^ E'a, can then he chosen to he of the form 



V -.n^c^c^n, T/|^) = ^(^^)i 



x)\x) 



and analogously for F : P^ ^ Ma, &x '~^ Fa- Here {cx} denotes the canonical hasis for i^. Hence 
we get 

c{UV*) = II Y. \k){l\ ® Tuv*{\k){l\)\ = II 5^(^l)i(Fl)(^l)5 ® \y){y\ ® \x){x\ 

k,l x,y 

x,y II 

7. Privacy Amplification against Quantum Adversaries 

A basic task in cryptography is to create a secure key from a classical random variable, which 
might be initially correlated to an adversary. Privacy amplification is the answer to this problem in 
the sense that it gives you an algorithm how to compute a secure key, and furthermore, the amount of 
key you get is essentially optimal. A crucial question is how one models the system of the adversary. 
In classical cryptography one usually assumes that the adversary's information is purely classical. 
The security in this scenario was analyzed in [1^ \5T\ [51 [TS] ■ In quantum cryptography one goes a 
step further and allows the adversary to encode his information in a state of a finite-dimensional 
quantum system. Security in this regime was analyzed in |53| [7^ [72l 193) . Furthermore, one can 
use the techniques of |40) to extend these results to the case when the adversary holds a state of a 
quantum system which is described by a separable Hilbert space Ti |39) . 

Here we consider the case when the adversary's information is encoded in a state of a quantum 
system which is described by a general von Neumann algebra M. This generalizes the result of 
privacy amplification to the most general quantum setting. If it comes to practical applications, this 
result might not be essential for systems with an infinite number of degrees of freedom, even if these 
are modeled by von Neumann algebras, because the results in |39| and a simple embedding argument 
are in fact sufficient. But in general this goes hand in hand with a potentially shorter key length 
and might therefore not be favorable. We will discuss this arguments at the end of this section in 
greater detail once the notation is settled. 

A classical random variable X correlated to some quantum state on a von Neumann algebra Me 
can be modeled by a classical quantum state ujxe on i°°{X) (g) Me- A perfectly secure key now 
corresponds to a uniform distribution that is independent of the adversary's information. This is 
described by a classical quantum state 

1 

—-ex ^ CTE , 
I I 

where ex = (1, • • • , 1) S ^^i^) ^-nd aE G S{Me)- In general, it is impossible to extract a perfectly 
secure key and therefore we concentrate on e-secure keys. The following security definition is analogue 
to the finite-dimensional case [72] and inherits all desired properties (see |72[ Section 2.2] for a detailed 
discussion). 
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Definition 7.1. Let Me be a von Neumann algebra, X a set of finite cardinality \X\, coxE = 
(Bxex<^% S ^^(X) <^ <S<{M.e), o-nd e > 0. Then ujxe is called an e-secure key with respect to M.e if 

II 1 II 

\\(^XE - TT^^ex ® ^E\\eilAf(ME)) - ^ ' 

I I 

where u;E = YlxeX ^E- 

Henceforth, we omit the subscript £^(A/'(A^_b)) for the norm. The basic idea to achieve an e- 
secure key from an input OJXE is to randomly combine several indices x into a single one, and 
thereby reducing the alphabet from X to K with \K\ < \X\. This process can be accomplished by 
using two-universal hash functions. 

Definition 7.2. Let X,K be sets of finite cardinality such that \K\ < \X\. A family of {X,K}-hash 
functions is a set {J~,^j^}x,K, where every element f £ J^ is a function f : X ^ K, called hash 
function, and ¥jr is a probability measure on the set T . A family of {X, K}-hash functions is called 
two-universal if for all x,y £ X with x ^ y 

(41) P.F(/(x) = /(y))<^. 

|A I 

Proposition 7.3. [Ml [S5] Let X,K be sets of finite cardinality such that \K\ < \X\. Then there 
exists a family of two-universal {X, K}-hash functions. 

Given a family of {X, K}-h.ash functions, we now construct maps which implement the action of 
hash functions / on probability distributions. That is, we define the operators Tj from i^{X) to 
e{K) by 

(42) {Tfu){i)= Y^ u{x) , uee\x), ieK. 

xeX:f(x)=i 

The action of the operators Tj can then trivially be extended to the space i^{X) (g) S<{AiE) by 

(43) T/ id : £^{X)(^S<{Me) ^ iH^) S<{Me) 

(44) {Tf(^id){coxE)ii)= Yl '^^' ^^^' 

x&X:f{x)=i 

where loxe = 0x6X^1- 

Theorem 7.4. Let Me be a von Neumann algebra, X,K sets of finite cardinality with \K\ < \X\, 
{J^,^j^}x,K 0- family of two-universal {X,K}-hash functions, and ujxe = ®xex^E ^ ^^(^) 
S<{Me)- Furthermore denote by Ej- the expectation with respect to ¥jr and by (T^(8)id) the operator 
given in ()44p . Then 



K^UTf (E) id){uxE) - jI^bk^ujeW < J\K\ ■ 2-Hmin(x|E)„ ^ 

I A I ' 

where uje = T,x^% ^ S<{Me)- 

Proof. The proof is different from the finite dimensional ones in yi2\ I93| and is more along the line 
of the classical results |10| W\\ [8]. The norm on i^{N{ME)) is defined to be the dual norm of 
(.°^{X) ® Me, and hence we have to consider the expectation value Ejr of the following expression 



(45) \\{Tf^id){uJxE)--r^^eK(^ujE\\=Yl 



1^..^-^,, ^ sup 



Y ^K^i) - 777]^ E{ai) 



K 

xeX:f(x)=i ' ' 



Because Hmin (^I-E')cj is finite (see Section [4. 3|) . we can assume that there exists a aE G S{Me) such 
that u}^ < A • cte for all x G X and suitable A > 0. We choose (vTo-, Tia, ^a) to be a purification of aE, 
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and denote by D^ G T^a{-M.E)' (resp. D € T^a{-M.E)') the corresponding Radon-Nikodym derivatives 
of Wg (resp. uje) with respect to a (see Appendix[B]). Using Dx,D we can write 

V uj%{ai) - —rUJEiai) = V {^a\DlD^TT^{ai)^^)-—-{^„\D*DTT„{a,)^„) 
^ — ' A ^ — ' A 

xeX:/(x)=i ' ' xGX:f(x)=i ' ' 



\xeX:f{x)=i ' ' / 



where the last step fohows from the fact that D^ as weh as D are elements of the commutant of 
T^ai-M-E)- We now insert this expression into (j45p . take the expectation Ejr and apply the following 
estimate, which follows from a two-fold application of the Cauchy-Schwarz inequality, 



1 j. 

2 / \ 2 



We find that the expression of interest, namely Ejr||(T/- (E) id){uJxE) — WI^K ® ^e\\, can be bounded 
by the quantity 



2 X \ 



\ i&K \xeX:f{x)=i ' ' / 

where the term ^/K originates from the estimate X^jgx^^Pa,;eA^E,|lai||=i (Co- K(T(oi)*vro-(a.j)^o- ) < K. 
So we are left with the expression under the square root. A simple binomial identity leads to 

2 



(46) 



(47) 



IE.F E (C- I ( E ^^'^^ - TJo^*^ ] ^^ ) 

ieK \x&X:f{x)=i ' ' / 

= E.F E (C- I I E ^-^- I ^-^ > - M ^^- \D*DD*DCa ; 



Here we used two identities, the first one being 

E^E E -E. 

i&K xeX:f{x)=i x&X 

and the second one following from a lemma about the Radon-Nikodym derivative of classical quantum 



states (Lemma IB. 3|1 

(48) E DlD^^a = D*Di„ . 

xex 
We proceed by considering the first term in the binomial expansion applied above, and find that 

E D:dA = E E DlD.DlDy 

yxeX:f{x)=i J x<^X:f(x)=iy&X:f{y)=i 

= E E '^-'^ ~ 5^.,j^) (^/(x)=i ^f{y)=i DlD^D*yDy + E D^D^DID^ . 

xeXyeX xeX:f{x)=i 

Next we have to take the expectation value of the last expression. The only quantities depending on 
the hashing function / are now the three deltas (1 — Sx,y) Sf(x)=i ^f(y)=i- Using the fact that J^ is a 
family of two- universal hash functions (Definition 17. 2p . we find that their expectation value fulfills 
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Hence we get the following bound for the quadratic term in (j46p . 

^tJ2^^-\\ E ^-^- I ^- ) < E ^^- \DlD,DlD,i, > + r^ ^^- \D*DD*Di, ) , 

where we again used ()48|) . Inserting this into ()46p . we see that the second term is cancelled, and 
thus we are left with the bound 

E^ E ^^- I ( E ^-^- - W\^*^ I ^- ) ^ E ^^- \DlD,DlD,i, ) . 

ieK \x£X:f{x)=i ' ' / xeX 

The expression on the right hand side can be estimated further, since we know that due to the 
Lemma lB.31 and the definition of Radon-Nikodym derivatives {^al'^xGX -^x-^xCa) = '^_e(I) ^ 1- 
Hence we find 

V (C. \DlDxDlD,i^ ) < max WDlD^W (C. | V DlD^i^ ) < 2°— l®-"^!^!!®--^^) , 

xex xex 

where the last step follows from Proposition IB. 21 and the definition of the max-relative entropy. This 
leaves us with the estimate 

E^\\{Tf^id){ujxE)-T^eK^ujE\\ < \/\K\ ■ 2D-x(e.<^|||e.<xB) _ 

\K I 

Finally, since our considerations are valid for all suitable aE G S{Me), the assertion follows easily by 
taking the infimum over this set and inserting the definition of the min-entropy of classical quantum 
states. n 

This theorem can be strengthened further to the following. 

Corollary 7.5. For the same conditions as in Theorem \7.4\ and e > 0, it holds that 



E^\\{Tf^id){ujxE)-TTTieK®uJE\\ < J \K\ ■ 2~^t-ninix\^)^ + 4e ^ 

\K I ' 

where uje = Zlx^l ^ S{Me)- 

Proof. The idea of the proof is exactly the same as in |72t I93| . but we repeat the argument for 
completeness. By the definition of the smooth conditional min-entropy (Defintion 14. lip , for any 
5 > 0, there exists Oxe G S''{ujxe) such that 

By Lemma [4. 8 1 coxE S B''{ujxe) implies HwxE — f^XEll < 2e, and moreover it is easy to see that by 
the definition of the norm (see equation ([2])) and the definition of the operator Tj <^ id (see (j44p ). it 
follows that 

\\{Tf ^ id){OxE) - {Tf ® id){ujxE)\\ < 2e . 
Using the triangle inequality and Theorem 17. 4[ we can conclude that 

Ejr\\(Tf (^id){uJxE) - -rr^eK^^EW < ^MliTf (8)id)(wx£') - -rfrreK ® (^e\\ 

|A I I A I 

+ \\{Tf0id){u]xE) - (Tf (8)id)(wx£;)|| + ||we - uje\\ 



Because this holds for any J > 0, the claim follows. D 

Now privacy amplification for given uixE £ f-^{X)(^S{ME) and e > works as follows. We choose 
(49) |K| = L2"^'it(^l^)-2iogfj _ 

and apply a hash function chosen from a two-universal family of {X, i^Tj-hash functions according to 
the distribution Pjr. A straightforward calculation shows that by Corollary 17. 5| we get an e-secure 
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key with respect to Me of length given in (|49p . As a next step we show that this amount is also 
essentially optimal. 

Proposition 7.6. Let Me be a von Neumann algebra, X,K sets of finite cardinality with \K\ < \X\, 
and f : X h^ K. If ujxe = ®xeX^E ^ ^^i-^) "^ S{Me) is such that ujf(x)E = W\^K ® cte for some 
aE G S{Me), then 

log|K|<H^in(X|£;)^ . 

Proof. The idea of the proof is exactly the same as in |93| . but we repeat the argument for complete- 
ness. By the definition of the guessing probability (|32p . it is easily seen that the probability for the 
adversary to guess K can not be smaller than the probability to guess X, that is, 

Pgncss{X\E)^ < Pgncss{K\E)ui ■ 

Furthermore, pg^ess{K\E) = 2~^"^'^' and by the operational interpretation of the min-entropy of 
classical quantum states as the guessing probability (Proposition 15. 4p we conclude that 

}imin{X\E)^ = -logPgucss{X\E):^ > - log p guess iK\E)^ = log\K\ . 

n 

Hence, for any given classical quantum state coxE, it is impossible to extract more than ]i^iu{X\E)i_j 
bits of perfect key. We generalize this to the case of an e-perfect key] | 

Corollary 7.7. Let Me be a von Neumann algebra, X,K sets of finite cardinality with \K\ < \X\, 
f : X h^ K, and e > 0. IfuJxE = ®x&x^e ^ i^{X)^S{ME) is such that \\ujf(x)E — jm^K^crEW < e 
for some aE G S{Me), then 

log\K\<}i^jX\E)^. 

Proof. By Lemma HiU \\(^f(x)E ~ Wl^K "^ ceW < e implies 

1 

^fiX)E -^e T^^eK (^ (TE ■ 

Furthermore, by the definition of the smooth conditional min-entropy (Defintion l4.1ip . for any 5 > 
exists a cq-state Cuke £ ^ {^f(x)E) such that 

ii^in{K\Eh > B^JK\E)^ - 6 . 

We define Tf : J\f{M\x\) — )• ^^{K) as the concatenation of the measurement in the diagonal basis 
|x)(x|, X £ X, and applying the function f on x. If we show that there exists a preimage OxE of 
Oke under Tf (^ id which satisfies coxE ^^ ^XE, we obtain 

(50) R-^JXIE)^ > H^in(X|E)<^ > R,,,i,,{K\Eh > R^,^{K\E)^ -5>log\K\-S , 

where the second inequality is due to Proposition 17.61 Because this holds for any 6 > 0, the claim 
follows. Hence, it remains to prove the existence of such a state coxE- Tf is a quantum channel, thus 
completely positive and unital, and it has a Stinespring dilation [62], Vx '■ C'-^' — t- C'^' ®C'^', which 
is given by Vx = Xlx l/(^))-ff '^ \x){x\x"- Here, the ancilla of the dilation is denoted by X" . Applied 
on a state aEX G 'S{Mix\ (8) Me), this means that {Tf <^ id){axE) is the restriction of the state 
Vx^XBVx{a) = <tx_b((VJ <8) lE)x(yx ® I)) onto system K and E, where a G Mx iX" Me- Now let 
uJxx'EE' be a purification (vr,'^, \iuj)) of the cq-state ujxe, where "H = 'w'^^ ® C^^^ ^ T^ee'- Then it 
follows that l^jj^) = Vx®^x®'^EE'\^ui) is a purification oIojke in 'H' = 'w^^®'H, since the restriction 
oiijOKX"X'EE' = ^x^xX'EE'^x onto system K and E is ojke- Now we take ojke ~^ ^ke as defined 
above and note that this implies F{ujke,^ke) > 1 — £• We can chose the representation vr and the 



91 

We were not able to find a detailed proof about this for the finite-dimensional case, although the optiinality is 
mentioned in [721193] . 
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Hilbert space T-Lee' in such way that ujke has a purification \S,u) in Ti', because we can always go 
into the standard form (see Appendix [A]). Then we obtain by the definition of the fidelity 

(51) F{ujke,u,ke) = sup Fis^^,){\0,U\Ca.)) ■ 

U&n{MKEY,\m<l 

Let p = V^Vx be the projector onto the image of Vx and observe that for all U G vr(A^xE)' 

(52) F{p\o,u\^a.)) = n\0,pum). 

We can therefore conclude that the optimum is attained for a purification |^^^) in p7i'. Because 
V :'H ^ p7i' is unitary, and the fidelity is invariant under unitary transformation, we obtain 

1 - e < F{u;ke,Oke) = i^B(pW')(l?- )' lO) = ^B(W)((^1 ^ 1)1^-)' i^x ^ I)lO) < F{u;xe,Oxe) • 

where u>xE is the restriction onto MxE of the state corresponding to (VJ- (8) ^)\^^)- Note that the 
last equality is due to the monotonicity of the fidelity (|14|) . By construction Tf maps CoxE to ooke 
and therefore we found the desired state. D 

Now we come back to the discussion of how one can apply the results for privacy amplification in 
the case of quantum systems described by finite-dimensional |72| I93| or separable |39) Hilbert spaces 
to the case where the system is modeled by a von Neumann algebra. The following idea is from |25| . 
If the eavesdropper's von Neumann algebra Me is not a full B{'H), then it can be naturally em- 
bedded into a full B{'H) = Me- By the definition of a key f Definition 17. ip and Me ^ -^sj ^n 
e-secure key with respect to Aig; is also an e-secure key with respect to A^£;U If ^ is separable 
the result from |39) can be applied, which provides a secure key of length Ii'^^^{X\E)i^, where ujxe 
is any extension of coxE on Mxe- We note that it might be possible to generalize the techniques 
of [40j to non-separable Hilbert spaces |96) . 

For many physical systems one can even overcome this requirement by using the following ar- 
gument. Namely, if the adversary's von Neumann algebra has a property called hyperfinite, which 
basically means that the von Neumann algebra can be arbitrarily well approximated by a direct 
sum of finite-dimensional matrix algebras (see |82) for proper definitions) o Although this is a non- 
constructive property, it is enough for privacy amplification. This is because we do not care about 
how the eavesdropper actually looks like, but only how it can be described in principle. Of course, 
we again have the problem that a direct sum of finite-dimensional matrix algebras is in general not 
a full B{'H), but it can be embedded into a B{'H) for some finite-dimensional Hilbert space Ti, for 
which the privacy amplification result for finite-dimensional Hilbert spaces is sufficient. 

But all these arguments rely on an embedding argument, and hence one generally loses the tight- 
ness of the privacy amplification result, and therefore, the optimality of the key length. This is also 
suggested by the data processing inequality (Proposition 14.15]) . which reads 

Hmin(-^|-E')cj > ^mini^\F)uj ■ 

Of course, a natural question is to ask for the amount of the loss. This is also interesting in a 
more general perspective since it is directly linked to restrictions of possible measurements of the 
eavesdropper. We end with the remark that the embedding argument might not work for general 
cryptographic setups with many parties. This is because of Tsirelson's problem |94| [59l [52] l82l 158) . 
or more precisely its generalization to many parties, which makes it unclear how one should embed 
all parties individually. 



This follows from the monotonicity of the norm on M{M.) under quantum channels. 

Hyperfinite von Neumann algebras include in particular the free boson field of finite temperature [4], and hyper- 
finiteness is also a consequence of certain axioms in algebraic quantum field theory [18] . 
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8. Classical Data Compression with Quantum Side Information 

The question of how much a classical random variable can be compressed is one of the most fun- 
damental task in classical information theory, and the answer goes all the way back to the pioneering 
work of Shannon |84) . Here we are interested in a particular version of the problem, where a classical 
random variable X is with a classical party Alice, but correlated with another party Bob, who is 
of general quantum nature. The question is then how many bits that Alice needs to send to Bob, 
such that he can recover X, using his quantum side information and the classical message. Under 
the assumption that the classical variable has finite alphabet, and that Bob's system can be mod- 
eled using a finite dimensional Hilbert space, this scenario was first analyzed in the asymptotic iid 
regime in |34) I i but recently also generalized to the one-shot case |70| . This then corresponds to the 
question as stated above. 

In our work we consider the scenario when Bob's side information is encoded in a state of a 
quantum system, which is described by a general von Neumann algebra Mb^ whereas the classical 
random variable still has finite alphabet sizeLj Note that this is not a cryptographic task so far, but 
nevertheless the task is interesting for quantum cryptography, because together with the result about 
privacy amplification against quantum adversaries (Section [7]), it allows the abstract quantification 
of distillable key (Section [9]). 

A classical random variable X correlated to some quantum state on a von Neumann algebra 
Mb is modeled by a cq-state ojxb G '^(^jxi ® ■^b)- A one-way classical communication protocol 
to transmit the random variable X from Alice to Bob then consists of a classical encoding map 
8 : t{X) -^ t{C) on Alice's side, and a decoding map V : t{C)®N{MB) -^ (-^{X) on Bob's 
side, where the classical alphabet C specifies the number of bits, log |C|, that are transmitted. The 
decoding map can be written as P = {"C^jceCj where the quantum channel V^ onto the classical 
outcome X can be described by a POVM {D'^}x(^x- In particular, this means that if Bob receives the 
value c & C from Alice he performs the measurement {D^}, and declares the measurement outcome 
to be his guess of the value hold by Alice. In the following every such protocol is specified by the 
triple {8,V,C). 

Definition 8.1. Let Mb be a von Neumann algebra, X a set of finite cardinality \X\, and UJXB £ 
5(£?^l <SiMb)- Then, the error probability of a protocol {£,T>,C) for ujxb is given by 

(53) p,„{u:xb;£,V) = 1 - J]a;|(Df(-)) , 

X 

and a protocol is called e-reliable if pc„{u}xB', ^ ^T^) ^ £• 

The main technical result of this section is the following quantification of the achievable error 
probability, as it was already shown for the finite-dimensional case in |70| . 



Theorem 8.2. Let Mb be a von Neumann algebra, X a set of finite cardinality \X\, and oJxB G 
S{£?^,<i$MB)- Then there exist for any alphabet C with \C\ < \X\, an encoding map E and a decoding 
map T>, such that the protocol {£,T>,C) satisfies 



(54) p,„{uxb;£,V) < J— . 2H-.(x|iJ) 




The protocol for which the bound is achieved, is in complete analogy to the finite-dimensional 
version |70) . We start by sketching the idea. For the encoding we employ the property of a family 
of two- universal hash functions J-" (Definition 17. 2p . In particular, we show that the averaged error 
probability over a family of two- universal hash functions J^ is bounded as in Equation ([5l|) . From 



Here asymptotic iid means that one has many independent copies of X and asks for the average asymptotic rate 
of classical communication needed. 

From the perspective of quantum cryptography this is a reasonable assumption. 
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this we can then conclude that there exists a function f € J^ suitable as an encoding map. Now 
assume that Alice holds the value x and sends the message c = f{x) to Bob. Bob then knows that 
X G /~^(c), and applies as the decoding map a measurement which is appropriate to distinguish 
between the states w^ for x G f~^{c). For that, he uses a POVM {D^,.r}x'£X with D^,.r = 
if x' ^ f~^{c), which we choose as an adapted 'pretty good measurement' |43| to distinguish the 
ensemble {w|}xe/-i(c)- 

Proof. The proof is based on Lemmata lC.ll and lC.2| and is similar to the one for the finite-dimensional 
case |70) (except for some technical difficulties). Let {J^,¥jr}x,c be a family of two-universal hash 
functions from the alphabet X onto C (Definition 17. 2p . We define II^ to be the support projection 
onto the positive part of a;^ — 2~"^'~^ujb, where ujb = Ylx ^B- Note that U^ € A4b for all x G X. 

Since the Hilbert space T-Lb on which Mb acts is in general infinite-dimensional, we have to 
introduce some regularizing terms, parameterized in e, in order to apply Lemma IC.ll ^ For any 
f £ J- and c G C, we define for e > and x G /~^(c) 

^^;/(^) ■■= 1 "!|tiL| ^^d T^^.jie) := ( J] U,,6,,, + e\r\c)\l) - Slj{e) . 

It is straightforward to see that S'^.Ae) + T^.f{() is invertible for any e > and x G f^^{c). By 
the help of these operators, we now define an e-family of decoding measurements {D^.Je)}x£X 
conditioned on the fact that the encoding map is / G J-" and the obtained message is c via 



Kjie) = {Sl.j{e) + Tlf{e))--Sl.j{e){S%f{e)+Tlf{e)) 



if X G f~^{c) and D'^.Ae) = else. For any e > it is true that D^.Ae) is a positive operator in Mb 
and '^x^x-fi^) — -"■• Hence, {D^.r(e)}x£X defines a valid but possibly incomplete measurement. 
On the other side, one can check that by setting S = S^.Je) and T = T^.f{() the conditions in 
Lemma IC.ll are satisfied, from which we obtain that 

(55) I - Dl.j{e) < 2(1 - Sl.j{e)) + ^Ujie) . 

Now, the idea is to define the particular measurements -D^/.f of the decoding map as the 'limit' of 
D^.Je) for e — 7- 0. For that, we consider the sequence {D^.r{l/n)}'^^i in Mb and observe that it is 
bounded due to the fact that the elements are measurement operators. In particular, the sequence 
lies in the unit sphere of B{^b)- We can therefore apply the Banach-Alaoglu theorem |67| Theorem 
VI. 26], which says that there exists a u-weakly converging subsequence A C N of {D'^.Al/n)}'^^-^. 
The limit of this subsequence is now used to define the appropriate measurements at the decoder 

■' A9n— >oo "^ 

Since Mb is cr-weakly closed, we know that D'^.r G Mb, and hence defines a possible measurement 
in Mb- Because positivity is preserved under taking the cj-weak limit, we obtain from Equation (|55p 
that 



(56) 1 - D'x.j < 2(1 -Ux) + 4. J2^x'S^ 



X"-'X'C 1 



for all X G X. The right hand side of the inequality is obtained by taking the cr-weak limit of S^.Je) 
and T^.Je). If we denote the decoding map corresponding to the measurements {D^.Ax^x by 2?^, 



26 



This is in contrast to the finite-dimensional case, where Lemma IC. H is appUed directly. 
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we can bound 



E 



'T 



X 

<j;.;|(2(i-n.) + A^n 

X ' ' X 

= 2 \u:xB [jj - Tlx)x&XJ + TTTJX ® ^B [{Jlx)x&X 



The first inequality is obtained via the inequahty ()56p and the defining property ()4ip of a family of 
two-universal hash functions. Finally, we apply Lemma IC.21 with (j) = ooxB and r] = 2/\C\tx ®i^b 
to obtain 



E^ 



2 .1/2 . I 1 



p,,,{uxB,f,V'f)\ < 2F{uxB, j^rx(^0JBr ^ ^ ]c\ ' 2«— (^1^)^+3 ^ 



where the last inequality is due to the operational interpretation of the max-entropy as shown in 
Theorem 15.51 This shows the existence of a suitable f G J^ for which the bound is achieved, and 
thus completes the proof. D 

This theorem can be strengthened further to the following. 

Corollary 8.3. Let Mb be a von Neumann algebra, X a set of finite cardinality \X\, ujxB £ 
5(£?^l ® -Mb), O'lT'd e > 0. Then there exist for any alphabet C with \C\ < \X\, an encoding map E 
and a decoding map D, such that the protocol {£, T>, C) satisfies 



(57) P.A^xb:£, V) < Jj^ ■ 2H^ax(^|B)„+3 + 2e 



Proof. The idea of the proof is exactly the same as in |70) . but we repeat the argument for complete- 
ness. In the following we fix the alphabet C. Let P'^^-,(x,x') be the joint probability distribution 
of the value x hold by Alice and the guess of Bob x' , if they use the protocol {£, T>), and the source 
is given by coxB- A straightforward computation shows that 

Perr{uJXB,£,T^) = ^\\(.(^bW^xx')x,x' " {^£^V)i^^ ^'))x,x'\\ii{XxX) ■ 

For any 5 > 0, we can find a cq-state QxB G S''{ujxb) such that H^^^^ {X\B)^ > Hmax (^l-S)^ — S. 
If (£,'D) is a protocol for which Theorem 18.21 applies for the state Oxb, we can use the triangle 
inequality to estimate 

Pcrr{^XB,£,'^) < Perri^JxB, £ ,'^) + -\\{^%W)x - ('^|(I))x||fi(X) 



where we used in the last inequality that the trace distance can only decrease if one applies a quantum 
channel. Using Lemma 14.81 we can finally bound ||u)xB — "^xbH ^ 2e, from which the result then 
follows. D 

By Corollary 18.31 classical data compression with quantum side information for given uxB S 
S{i°°{X) (^ Mb) and error probability pc„ = e > 0, can now be achieved by sending 

(58) Id = r2Hma>=('^l-S)c.+2iog7+6" 
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bits from Alice to Bob. As a next step we show that this amount is also essentially optimal. 

Lemma 8.4. Let Mb be a von Neumann algebra, X a set of finite cardinality \X\, ooxB G '^(^jxi ® 
Mb), o,nd (£,D,C) be protocol with pcrri^^XBiS,'^) ^ e for some e > 0. Then 

(59) log\C\>R^AX\B)^ . 



Proof. The idea of the proof is exactly the same as in |70) . but we repeat the argument for com- 
pleteness. Because of Perr('^XBi'^i^) < e, we know that P^px(x,x'), as defined in the proof of 
Corollary 18.31 satisfies ||IP(^-p-) — IPidll^i(XxX) ^ £> where Pid(x,x') = uj^{T)6xx'- Bounding the 
purified distance by the £^-norm (Lemma 14. 8p and using that Hmax (^l^')p- = we obtain 

H^l {X\BC)^ < Hf"^ (X|X% < H^ax (^l^')p,, = ' 
where the data processing inequality (|27p is applied in the first inequality. For any 5 > we can 
find a cq-state CdxBC S ^^(wxBc) such that H;^ {X\BC)^ > H^ax {X\BC)^ - 6. Hence with 
Lemma IC.4I 

log \C\ > H,,ax {X\B)^ -6>R^^ {X\B)^ - 5 , 



where the last inequality is due to V{ujxb-,^xb) ^ \/2e. Because this holds for all 5 > we found 
the desired result. D 

9. Quantum Key Distillation 

In quantum key distribution, one considers a tripartite information theoretical setting with parties 
Alice, Bob, and Eve. The goal is for Alice and Bob to create a key, that is, an uniformly distributed 
random bit string which is known to both of them (correctness condition), but not to the adversary 
Eve (security condition). There is an enormous number of ideas and corresponding implementations 
how to achieve this task (see |80) and references therein). Some implementations use systems that 
are known to be modeled correctly by finite-dimensional Hilbert spaces, and some do not. The latter 
are often called continuous variable quantum key distribution schemes. For these schemes theoretical 
difficulties arise |80| [55] . 

Here we do not analyze any quantum key distribution schemes in particular, but give an abstract 
quantification of the distillable key, as it was done in |35[ 1701 for the finite-dimensional case. A way 
to think about quantum key distribution is the followingo One commences with two space like 
separated parties Alice and Bob, which initially share a state coab £ ^{Mab) on a quantum system 
with an associated observable algebra Mab = Ma^ J^B, where Ma is Alice's part and Mb Bob's 
part. Note that in contrast to the previous sections, Ma denotes a general von Neumann algebra, 
not a finite-dimensional one. Now it is assumed that the third party. Eve, does not have access to 
Alice's and Bob's system, i.e. all of Eve's measurement operators have to commute with all elements 
in Mab- This can be modeled by taking a purification ujabe of ojab and assuming that Eve has the 
complementary system Me (cf. Definition 13. 3p j ^ The first step is then for Alice to apply a POVM 
{E^}x£X C Ma with finite alphabet size \X\ to make her system classical (cf. Section F3.2p . Thus 
the resulting post-measurement state is modeled by a cq-state OJXBE £ S{(.°°{X) ®Mbe)- 

A one-way classical communication key distillation protocol for ujxbe consists of a classical en- 
coding map £ : i^{X) — t- ^^{Ka) on Alice's side, sending a classical message M from Alice to Bob, 
and a decoding map V : £^{M) ®M{Mb) — ^ '^^{Kb) on Bob's side, where \Ka\ = \Kb\ = \K\- An 
output state which provides a perfectly secure key corresponds to a uniform distribution on Ka^ Kb 
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The entanglement based approach presented in the following is also called quantum key distillation. Note that 

prepare and measure schemes can sometimes be analyzed in this approach as well (see [9] for a finite-dimensional 

example) . 

As pointed out in Section [3.21 purifications do always exist, but are in general not unique. However, since they 

are all related by partial isometries (Lemma 13. 4p . it does not matter which one we use. 
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which is independent of the eavesdropper's information (which includes the classical message M), 
that is, a cccq-state 

1 1 

K ^^ K 



'^Ka ® TlTi^^KB ® ^ME 



where ck = (1, • • • , 1) G ^^{K), and ume G S{(°°{M) (g) M^e) containing the classical message M 
and the quantum part Me- 

Definition 9.1. Let Mbe be a bipartite von Neumann algebra, X a set of finite cardinality, UJXBE £ 
S{i°^{X)(S>MBE), and e > 0. ^ one-way classical communication key distillation protocol for ojx BE 
as defined above is called e-secure with respect to Me, if the output state ujkaKbME of the protocol 
satisfies that 

/ N II 11 II 

(60) \\0JKaKbME - T^fKA ® T^\^i<B ® ^ME\\li(M{ME)) ^ « • 

The goal is to quantify the maximal achievable key length \K\ for given uJxBE and e > 0. 

Theorem 9.2. Let Mbe be a bipartite von Neumann algebra, X a set of finite cardinality, OJXBE S 
S{i°°[X) ® Mbe), o,nd ei,e2 > 0. Then there exists a one-way classical communication key distil- 
lation protocol for ujxbe that is (ei + e2)-secure with respect to Me, CL^d 



(61) \K\ 



sup 2^-i''^^l^^)'^-"-^^'''(^l^^^"-'^°s(^ 

X^{Y,Z) 



where the supremum is over all functions from X to a pair of random variables (Y, Z). Furthermore, 
for every one-way classical communication key distillation protocol for OJXBE that is e-secure with 
respect to Me holds that 

(62) \K\ < sup 2K.^(^l^^)--«-x(v|B^). . 

X^{Y,Z) 

Proof. Since the idea for the proof is the same as in the finite-dimensional case |70| . and moreover, the 
necessary generalizations to the von Neumann algebra setting are already achieved in Section [7] and [HI 
we only sketch the proof. In order to prove (|6ip . we start by showing that a key length 

(63) ^Kl/:{X\E)^~u:il^iX\B)^-2log(^) 

is achievable. In a first step, Alice transmits her bit string X to Bob by sending a classical message 
M via the classical channel. Then, Alice and Bob perform privacy amplification on X, and thus, we 
have by Corollary [73] that 

H^,(f(X|ME)^-21ogA 

is achievable. In the following we estimate this quantity. For that we use a chain rule for the smooth 
conditional min-entropy (Lemma IC.3P and Lemma [C. 5 1 to find that for any 6 > 



Rl,,{X\ME)^ > Ri^^{XM\E)^ - log \M\ > Kini^\E)^ " log \M\ . 

Moreover by ()58p . classical data compression with quantum side information can be achieved for|_ 

1 6 

log|M|=H;^/^(X|i3)^-21og-. 

€2 



Putting all this together results in (|63j) . If we allow Alice to perform preprocessing by computing 
Y, Z from X and sending Y to Bob via a classical channel, we finally find (|6ip . The proof of (|62p 
can be found in [TO]. D 
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We choose e — £2/2 in (|58|) . since the error measured in norm distance is then upper bounded by £2 (and not e) 
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For particular quantum key distribution schemes, the power of Ahce and Bob is often Hmited 
in the sense that they can only make some kind of measurements (but usually unlimited classical 
post-processing). That is, one is not interested in the theoretically optimal amount of distillable key, 
but to prove the security of a scheme at hand. Going back to equation ([6T]) . this means that one has 
to show that there is a non-zero e-secure key rate, i.e. to show that 

(64) H^in(^l^)- - HU(^I^')- > , 

where ojxx' denotes the state hold by Alice and Bob, after Bob applied his local measurements. 
The max-entropy term can be estimated with a (classical) statistical analysis, because the relevant 
data is directly accessible to Alice and Bob. However, the difficult part is to estimate the min- 
entropy term which involves Eve's system, to which both, Alice and Bob, do not have access. The 
min-entropy term is then often estimated under the assumption that Eve only performs 'collective 
attacks'. In the finite-dimensional regime it is known that these collective attacks are qualitatively 
equal to general attacks, by means of the quantum exponential de Finetti theorem |72| [7T] or the 
post-selection technique |27)r^ In contrast to this, it is known that these techniques do not work 
in the infinite dimensional case |26)PH But very recently, a conceptually new proof technique for 
finite-dimensional systems was introduced in \Q2\ I91|. It uses the entropic uncertainty relation with 
quantum side information (cf . Section [6]) to estimate the min-entropy term in ([6l|) . The advantage 
is that no reference to the quantum exponential de Finetti theorem or the post-selection technique 
is necessarvrl Thus, it seems to be promising to apply these ideas to continuous variable quantum 
key distribution schemes and a detailed analysis is work in progress. 

10. Discussion and Outlook 

We generalized the smooth entropy formalism to von Neumann algebras and established most of 
their important properties. This paves the way for applications of this formalism to quantum informa- 
tion theoretical tasks involving infinite-dimensional quantum systems. In particular, we considered 
the smooth conditional min- and max- entropy, H^jj^(j4|i?)p and 'E!^^.-^-^{A\B) p, for the case when the 
system A is finite-dimensional (quantum or classical) and the system i? is a general von Neumann 
algebra (Section U]). This also involved a discussion and extension of several tools from quantum 
information theory to the von Neumann algebra setting (Section [3]). With this at hand, we proved 
several properties of these entropies, like the duality relation (Proposition 14. l4|l or an entropic uncer- 
tainty relation (Theorem 16. ip . The operational interpretations shown in Sections [5]- [9l indicate that 
the smooth min- and max-entropy are really suitable entropic measures for general quantum systems. 

We characterized two specific primitives in quantum information, namely, privacy amplification 
in Section [7] and data compression with quantum side information in Section [S] Both tasks address 
a situation where one aims to deduce the uncertainty about a classical system which is correlated 
to a quantum system. Hence, an interesting question that arises, is whether primitives in which 
both systems are quantum, like for instance quantum state merging [491 HH] [TT] or decoupling prop- 
erties |37| [36], also carry over to the setting of von Neumann algebras. Another question is if one 
recovers the von Neumann entropy in the asymptotic limit of an iid source. For the case where the 
system A and the system B are finite-dimensional, this was shown in [89], and then later generalized 
to the case when the system B is modeled on a separable Hilbert space |40) . 



As discussed in Section [9l the results in this paper might find applications for security proofs 
of continuous variable quantum key distribution schemes. In particular, all the basic operational 
tasks used in a generic quantum key distribution protocol, are now generalized to the setting of von 
Neumann algebras, which makes certain techniques presented in |72| also applicable for continuous 



Note however, that this step often makes practical implementations rather inefficient [811185) . 

There exists attempts to introduce additional measurements to assure that the system in question can be modeled 
using finite-dimensional Hilbert spaces |73| . which then make these techniques applicable. 

Therefore, this approach should be favored in the finite-dimensional case as well. In particular, it allows for a 
large class of protocols to calculate tight finite key rates that are unconditionally secure [91j . 



34 THE SMOOTH ENTROPY FORMALISM ON VON NEUMANN ALGEBRAS 

variable systems. In addition, we also generalized the uncertainty relation with quantum side infor- 
mation from |92| to the von Neumann algebra setting (Section [6]), which is promising with regard 
to the new prove technique developed in |91| . This uncertainty relation might also be interesting 
on its own when applied to concrete physical systems, like for instance for position and momentum 
measurements. 

It might also be enlightening to extend the scope of the smooth min- and max-entropy formalism 
to more general cases. For instance, the system A could be extended to continuous classical systems, 
which would lead to a regularized entropy density. This might be suitable to analyze measurement 
results of continuous variable systems, like the quadratures of a light field, and supersede technical 
problems which come along with a discretization of the measurement outcomes. Mathematically, one 
could also imagine to generalize the formalism to operator systems |63) . From a physical perspective, 
this would correspond to a restriction of the actual measurement allowed to 'read out' the quantum 
svstemJ n For a task like data compression with quantum side information (Section [8|), this would 
allow to constraint the actual quantum measurements at the decoder. 

Since the smooth entropy formalism has also been applied to thermodynamics |331 [30] , the general- 
ization to the von Neumann algebra setting is also of interest from a physical perspective. Especially, 
as quantum mechanical systems of interest in thermodynamics often possess an infinite number of 
degrees of freedom. 
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Appendix A. Standard Form of von Neumann Algebras 

Each von Neumann algebra admits a representation for which all states are simultaneously pure 
in the sense of Definition 13.31 that is, each state allows a vector representation. This representation 
is called a standard form of the von Neumann algebra and discussed in |87[ Section IX] . 

Proposition A.l. [871 Section IX] Let A4 be a von Neumann algebra. Then there exists a faithful 
representation it on a Hilbert space %, a positive cone V <Z % and an anti linear isometry J with 
J^ = I, such that Jit{M)J = 'n{M)' , and Jrj = rj for all rj £ V. Moreover, for each uj G M^{M) 
there exists a unique |^^) G V such that u){x) = {£,ijj,'^ix)^uj) for all x G Ai. 

Definition A. 2. A representation of Ai as given in Proposition \A . 1\ is called a standard form of Ai 
and specified by {A4,H,V,J), where we identified tt(A4) with Ai. 

The standard form of a von Neumann algebra is unique up to unitary equivalence [871 Section IX, 
Theorem 1.14]. 



This restriction could also be conducted at a fundamental level, when one only excludes the elements of the von 
Neumann algebra that are unphysical in the sense that they do not correspond to a physical measurement. 
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Appendix B. Non-Commutative Radon-Nikodym Derivatives 

This appendix is devoted to a short introduction into the concept of non-commutative Radon- 
Nikodym derivatives, which are generahzations of measure theoretic concepts to von Neumann al- 
gebras. However, in the fohowing we do not assume any knowledge of classical results. The first 
non-commutative versions are due to Sakai 1791. 



Definition B.l. Let M he a von Neumann algebra, uj,a £ M + , and I G R"*". We then call uj 
l-dominated by a if 

oj{a) < I • cr{a) , 
holds for all a & M. 

Proposition B.2. Let Ai be a von Neumann algebra, and to, a S N'~^{Ai) such thatco is l-dominated 
by a. If {tTuj,'Huj,\S,ui)) o,nd (vro-,?^o-) I'Co-)) o,re purifications of to, a, respectively, then there exists a 
positive operator h^^ on T-L^j, commuting with the range of t:^, such that for all a & M 

Uj{a) = {ia\hujT^a{a)^a) ■ 

Moreover h^^ can be written as D*D, where D : Tia — ^ "Wtj is a bounded operator satisfying 

and the norm log \\h^\\ = log ||-D|P is given by the max-relative entropy Dmax ("^ II '7)- The operator 
D is called the Radon-Nikodym derivative of oj with respect to a. 

Proof. Remember that we can assume that the purifications {tTu],'Huj,\S,uj)) and (vro-,'H(j, l^o-)) are 
cyclic, that is, we have Ti^^ = tTu}{M)\Cui) and likewise Tio- = TraiM)\S,a)- Hence, we can use u to 
define a bounded positive bilinear form B on Tia by the formula 

B{TT„{a)S,a,'n-a{b)S,a) =uj{a*b) . 

By the representation theorem for bounded positive bilinear forms on a Hilbert space, there exist 
a unique operator h^^ on Tia such that B{'Kf^{a)^a,'^a{b)S,a) = (tTo- (0)^0- |/ia; '?'"(t(^) Co- )• Since uj is 
/-dominated by a, we have that 

II . II {■^cT{a)Ca\huTTcT{a)^^) u{a*a) / n x 

\\huj\\ = sup — r \t \ = S^P ^ H. \ = ^max (^ || fj) . 

Next we have to check that h^^ is an element of tt^^M)' . But this follows from the following simple 
computation. For a,b,c £ Ai we get 

{'n-a{a)S,a \hoj'n:a{b)'n:aic)Ca ) = {'^a{a)ia \huj'Ka{bc)ia ) = uj{a*bc) 

and hence, [haj^TTaih)] = 0, 6 G 7W. Now define the operator D via D-Ka{a)\£,a) = t^u){o)\^u)) and 
due to the same argument as above it follows that D extends to a bounded operator satisfying 
DTTaia) = TT^{a)D for ail a £ M and h^ = D*D. D 

The following lemma is about the Radon-Nikodym derivative of cq-states. 

Lemma B.3. Let Me be a von Neumann algebra, X a set of finite cardinality, uxE = (Bx^e ^ 
£^{X) ^S{Me), and r G M~^{Me) such that uj%<t for all x £ X. Furthermore, let (7rr,^r, ICr)) 
be a purification of t, and denote by D^ and D the corresponding Radon-Nikodym derivatives for uj^ 
and UJ = X^^gx uJe '^^^^ respect to r. Then it holds that 

T^ria) Y, DlD^i^ = 'Kr{a)D*DCr , 
xex 

for all a G Me- 
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Proof. Since we can assume that the purification {tTt-,T-Lt, \Ct)) is cychc, this follows easily because 
we have 

(7r,(a)e. Kib) Y, DlD^ir ) = Y. (^-^- |vr.(a*6)Z5,.e. ) = ^u;|(a*6) = co{a*b) 
xex xex X 

= {7Tria)^r\7Tr{b)D*D^r) , 

for all a, 6 G Me- D 

Appendix C. Misc Lemmata 
The next two lemmata are the technical building blocks in the proof of Proposition 18.21 

Lemma C.l. 031 Lemma 2] Let M be a von Neumann algebra, S,T £ M+, and S < 1. If {S + T) 

is invertible m TWJfj then it holds that 

(65) 1-{S + Ty^S{S + T)"^ < 2(1 - 5) + 4T. 

The following lemma was first proven in the finite-dimensional setting [5], and then generalized to 
von Neumann algebras |61) . 

Lemma C.2. Let M be a von Neumann algebra, (j),r] £ S<{M), s+ the support projection onto the 
positive part of (j) — r], and s_ = I — s+. Then 

(66) 0(s_)+r?(s+)<^((/.,7?)5 . 

Proof. The statement follows directly from |6H Corollary 1.1]. In order to see this we note that 
the relative modular operator A^^^ in a standard form {M,7i,V,J} of A^ satisfies A^^^j^,^) = |^j^) 
for \^^), \^r]) £ T-^ purifications of (j) and tj, respectively. Hence, by the definition of the generalized 
fidelity 

\\K%\\ = i^^w,^^) = (c^ie,) <-^(0,r/)5 . 

Furthermore, we observe that 

</.(!) + r,{l) -\4>- r,\{l) = </.(!) + r,{l) - {<P - 7?)(s+) + (0 - 7?)(I - s+) 

= 2{^{s.) + 7]{S+)) . 

D 
The following lemmata are needed in Section |9l 

Lemma C.3. Let Mabc = ^m ® ^n ® -Mc with Aic Q^ general von Neumann algebra, and 
^ABC £ S{Mabc)- Then it follows that 

W^^{AB\C)^ < W^,^iA\BC)^ + login) . 

Proof. The proof is the same as in the finite-dimensional case |70| Lemma 5]. For any 6i > 0, there 
exists COABC S B'^{ujABc) such that W^-^^{AB\C)^ < }imm{AB\C)u! + 6i, and for any 62 > 0, there 
exists (7(7 € S{^Ac) such that Hmin(Ai?|C)ii, < — D^i^^{ujabc\\'TAB ® (Tc), where tab denotes the 
trace on Mm •S' Mn. Now we calculate 

H^in(A|SC7)^ + log(n) > R^in{A\BC)co + log(n) > -Anax(^ABclkA ® — «> fJc) + log(n) 

n 

= -Dma.A^ABc\\TAB ® CTc) > Hmin(^-B|C)^ - 82 
>HtniniAB\C)^- 81-62, 

and since that holds for any 61,62 > 0, the claim follows. D 

Lemma C.4. Let M.abx = Mn ® Mb ® i°°{X) with Mb cl general von Neumann algebra, X a 
set of finite cardinality, and ujabx G S<{Mabx)- Then it follows that 

(67) H^ax {A\BX)^ > H^ax {A\B)^ - log \X\ . 



In the finite-dimensional case this requirement can be neglected by taking the inverse on the support of 5 + T. 



THE SMOOTH ENTROPY FORMALISM ON VON NEUMANN ALGEBRAS 37 

Proof. We follow the proof from the finite-dimensional case |70| Lemma 4] , and express ()67p in terms 
of the conditional min-entropy by means of the duality relation (Proposition I4.14|) . Let us write 
^ABX = i^AB)^^^ ^^^ take a representation vr of Mae on some Hilbert space Ti for which each 
uj^^ admits a purification \^x) £ T~(-- We denote the complementary system by Mr. It then follows 
that 10 = J2x \^x) ® 1^) ® 1^^) in ^ (8) C'^' C'-^' is a purification of ujabx- Hence ([67|) turns into 

(68) H^in(A|i?XX')a. > B^UA\RX% - log \X\ , 

with ojabrxx' the state corresponding to \S,). Note that X,X' do not refer to classical systems 
anymore, but to a finite dimensional quantum system of dimension \X\. If we define w^'^^ as the 
functional on Mabb. given by a i— t- Tr(a|^a;)(^a;/|) one finds that (|68|) is equivalent to 

R^i^{A\RX)^ > Hn.nM\RXh - log \X\ , 

where coarx = {^ar )^^' ^^^ <^ARX = {'^ar ^x,x')xx'- This inequality now follows from the definition 
of the conditional min-entropy (Definition I4.2p and the fact that ujarx ^ 1^1 " '^ARX- In order 
to see the latter property, note that for any positive E = {Exx')xx' S Marx the matrix Me = 
{'^^AR i-^xx')) I is positive, wherefore 

uJARxiE) = Tr [(1),,, • Me] < \\{l)xx'\\ ■ TV [Me] = \\{l)xx'\\ ■ Ojarx{E) < \X\ ■ ojarx{E) , 
where {l)xx' denotes the matrix with all entries equal to 1. D 

Lemma C.5. Let Maxb = Mn 0i°^{X) ® Mb with Mb a general von Neumann algebra, X a set 
of finite cardinality \X\, and coax B £ ^.^{Maxb)- Then it follows that 

(69) Rtnin{AX\B)^>}i^^,,iA\B)^ . 

Proof. For e = 0, the proof from fl2[ Lemma 3.1.9] is also valid for von Neumann algebras. For e > 0, 
we proceed as follows. For all 6 > 0, there exists a cq-state Oab G S^i^XB) such that H^j^^ {A\B)^ < 
R-rain{A\B)- + 5. We then take a purification (y.,Tr,\^)) of coaxb such that there exists also a 
purification (7^, vr, |r/)) of uiab in T~(-- Now, by the definition of the purified distance (Definition 14. 7p . 
we can even find a purification \7]) of Coab such that 'Pmab{'^AB-,^Ab) = 'Pb(-h)(IO' I^))- Hence, if 
we denote by u)axb the state induced by I?/), we get that uaxb S B''{ujaxb)- We can then estimate 

H^i, {A\B)^ < H^i, iA\B)^ + 5 < H„,i„ {AX\B)^ + 5 < W^,, {AX\B)^ + 5 , 

where we the result for e = 0. Since this holds for any 6 > 0, the proof is completed. D 
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